WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

Software Contact Form to DB by BestWebSoft Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-36508 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d7318d25ca7b Credits LEE SE HYOUNG hackintoanetwork...

file:magic_fuzzer_loaddb: Crash in regcomp

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6499330727739392 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5caf57f0 Crash State:...

CVE-2023-2779

creationtimestamp| type| source ---|---|--- 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51534...

PT-2023-6539 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: NocoDB versions 0.106.0 and earlier NocoDB version 0.109.1 Description: The issue is related to a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter ...

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-32028

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

Remote code execution

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

Remote code execution

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-29349 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

...

CVE-2023-29349 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

...

CVE-2023-29349

CVE-2023-29349 concerns Microsoft ODBC and OLE DB components (SQL Server ODBC Driver and OLE DB Driver) enabling remote code execution. The vulnerability arises from improper handling in the ODBC/OLE DB stack, with an attack vector described as LOCAL and requiring user interaction, resulting in h...

CVE-2023-32028

CVE-2023-32028 – Microsoft SQL OLE DB Remote Code Execution Vulnerability affects the Microsoft OLE DB Driver for SQL Server (OLE DB Driver 19 for SQL Server, 18 for SQL Server) and related SQL Server OLE DB components. The root cause enables remote code execution, with exploitation described as ...

CVE-2023-32028 Microsoft SQL OLE DB Remote Code Execution Vulnerability

...

CVE-2023-32028: Heap-based Buffer Overflow

Microsoft SQL OLE DB Remote Code Execution Vulnerability...

CVE-2023-29349: Integer Underflow (Wrap or Wraparound)

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

...

Microsoft SQL OLE DB Remote Code Execution Vulnerability

...

PT-2023-3401 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to execute...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft ODBC Driver that stems from the presence of a remote code execution...