CVE-2024-10790 Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG

The Admin and Site Enhancements ASE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level...

CVE-2024-5792

CVE-2024-5792 affects Houzez CRM (WordPress) plugin up to version 1.4.2, exposing a time-based SQL Injection via the notes parameter bel ong_to, exploitable by authenticated users with Custom-level (seller) access or higher. Root cause: insufficient escaping/parameter handling in the existing SQL...

Security Zones

Select the Security tab. This provides a list of the various security zones that Internet Explorer uses. For each of these zones, you can select a Custom Level of protection. By clicking the Custom Level button, you will see a second window open that permits you to select various security setting...

ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln

No description provided by source. ------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procuts Site :...

ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln

Exploit for hardware platform in category remote exploits ================================================================== ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln ==================================================================...