11761 matches found
eNMS 安全漏洞
eNMS is a network automation platform from eNMS Open Source. A security vulnerability exists in eNMS versions prior to 4.4.0 through 4.7.1, which stems from vulnerability to directory traversal attacks via editfile...
PT-2024-32089 · Enms · Enms
Name of the Vulnerable Software and Affected Versions: eNMS versions 4.4.0 through 4.7.1 Description: The issue is related to Directory Traversal via edit file. This allows unauthorized access to sensitive files and directories. Recommendations: For versions 4.4.0 through 4.7.1, consider...
htmly 2.9.9 Cross Site Scripting
Exploit Title: Stored XSS in "Edit Profile" - htmlyv2.9.9 Date: 9/2024 Exploit Author: Andrey Stoykov Version: 2.9.9 Tested on: Ubuntu 22.04 Blog: https://msecureltd.blogspot.com/2024/09/friday-fun-pentest-series-11-stored-xss.html Stored XSS 1: Steps to Reproduce: 1. Login as author 2. Browse to...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the edit form HTML field. An attacker can inject malicious scripts that could be executed in the context of the user's session. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the edit form HTML field. An attacker can inject malicious scripts that could be executed in the context of the user's session. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
CVE-2024-47058 Cross-site Scripting (XSS) - stored (edit form HTML field)
With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session...
CVE-2024-8490
The PropertyHive plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.19. This is due to missing or incorrect nonce validation on the 'saveaccountdetails' function. This makes it possible for unauthenticated attackers to edit the name, email...
CVE-2024-42798
An Incorrect Access Control vulnerability was found in /music/index.php?page=userlist and /music/index.php?page=edituser in Kashipara Music Management System v1.0. This allows a low privileged attacker to take over the administrator account...
CVE-2024-42795
An Incorrect Access Control vulnerability was found in /music/viewuser.php?id=3 and /music/controller.php?page=edituser&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to view valid user details...
CVE-2024-8782
A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the publ...
PT-2024-39248 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalCMS versions up to 1.0 Description: A critical issue affects the delete function of the file /admin/template/edit. The manipulation of the name argument leads to path traversal, allowing an attacker to delete arbitrary files. This issue...
CVE-2024-7626
The WP Delicious – Recipe Plugin for Food Bloggers formerly Delicious Recipes plugin for WordPress is vulnerable to arbitrary file movement and reading due to insufficient file path validation in the saveeditprofiledetails function in all versions up to, and including, 1.6.9. This makes it possib...
CVE-2024-40650
In wifiitemeditcontent of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34831
cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...
PT-2024-28966
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a possible FRP Factory Reset Protection bypass due to a missing check for the FRP state in the wifi item edit content of styles.xml. This could lead to local escalatio...
PT-2024-8663 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A vulnerability was found in Moodle, related to insufficient authentication procedure, which may allow a remote attacker to gain unauthorized access to system elements. The issue requires...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of checking for FRP status in wifiitemeditcontent in styles.xml. An attacker can exploit this vulnerability to escalate privileg...
CVE-2024-34831
cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...
CVE-2024-8427
The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...
