11673 matches found
PT-2023-18822 · Vcita · Contact Form/Calls To Action
Name of the Vulnerable Software and Affected Versions: Contact Form and Calls To Action by vcita plugin for WordPress versions up to, and including, 2.6.4 Description: The issue is related to Stored Cross-Site Scripting via the email parameter due to insufficient input sanitization and output...
Exploit for Cross-site Scripting in Minical
CVE-2023-33408 Minical 1.0.0 is vulnerable to Stored Cross-Si...
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery (CSRF) to Stored XSS
The plugin does not protect the ajax actions azhsave against CSRF attacks, allowing an unauthenticated attacker to modify posts by tricking a logged in user with rights to edit the post to submit a crafted request. Furthermore if the targeted user has a role of editor or above, arbitrary web...
CVE-2023-32707
In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edituser’ capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted w...
Splunk 安全漏洞
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...
CVE-2023-33642
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID interface at /goform/aspForm...
CVE-2023-33642
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID interface at /goform/aspForm...
CVE-2023-33638
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID5G interface at /goform/aspForm...
CVE-2023-33638
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID5G interface at /goform/aspForm...
CVE-2021-31233
SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...
Sql injection
SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...
PT-2023-24429 · H3C · H3C Magic R300
Name of the Vulnerable Software and Affected Versions: H3C Magic R300 version R300-2100MV100R004 Description: A stack overflow issue was discovered via the Edit BasicSSID interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R300 device. Recommendations: For H3C Magic...
Fighting Cock Information System SQL注入漏洞
Fighting Cock Information System is a chicken information system by chrisjelo individual developer. A security vulnerability exists in Fighting Cock Information System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to obtain sensitive information...
CVE-2023-33638
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditBasicSSID5G interface at /goform/aspForm...
H3C Magic R300 缓冲区错误漏洞
The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the EditBasicSSID5G interface of /goform/aspForm contains a stack overflow...
Lost And Found Information System 1.0 Broken Access Control / Privilege Escalation Vulnerability
Vulnerability: Broken Access Control Author: Akash Pandey CVE: CVE-2023-3018 Source: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html Steps to re-produce: 1. Go to https://site.com/admin/?page=user/list as staff user...
H3C Magic R300 缓冲区错误漏洞
The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the EditBasicSID interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overflow...
PT-2023-12143 · Unknown · Fighting Cock Information System
Name of the Vulnerable Software and Affected Versions: Fighting Cock Information System version 1.0 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via the 'edit breed.php' parameter. Recommendations: For Fighting Cock Information System version 1.0,...
Lost And Found Information System 1.0 Broken Access Control / Privilege Escalation
Vulnerability: Broken Access Control Author: Akash Pandey CVE: CVE-2023-3018 Source: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html Steps to re-produce: 1. Go to https://site.com/admin/?page=user/list as staff user...