2763 matches found
DIAEnergie 1.10 SQL Injection Exploit
This Metasploit module exploit a remote SQL injection vulnerability in the CBEC service of DIAEnergie versions 1.10 and below from Delta Electronics. The commands will get executed in the context of NT AUTHORITY\SYSTEM. class MetasploitModule 'DIAEnergie SQL Injection CVE-2024-4548', 'Description...
USN-6200-1: ImageMagick vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that ImageMagick incorrectly handled the “-authenticate” option for password-protected PDF files. An attacker could possibly use this issue to inject additional...
PT-2024-30541
Name of the Vulnerable Software and Affected Versions TruffleHog versions prior to 3.81.9 Description This issue allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to make an unauthorized request to an endpoint chosen by the...
Calibre 7.15.0 Python Code Injection Exploit
This Metasploit module exploits a Python code injection vulnerability in the Content Server component of Calibre version 6.9.0 through 7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does no...
CVE-2024-38741
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Noor-E-Alam Amazing Hover Effects allows Stored XSS.This issue affects Amazing Hover Effects: from n/a through 2.4.9...
CVE-2024-38741
CVE-2024-38741 – WordPress plugin Amazing Hover Effects (versions <= 2.4.9) suffers Stored XSS due to improper neutralization of input during web page generation. Impact: potential script execution in a user’s browser when processing vulnerable content. Affected product/version: Noor-E-Alam Am...
CVE-2024-38741 WordPress Amazing Hover Effects plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Noor-E-Alam Amazing Hover Effects allows Stored XSS.This issue affects Amazing Hover Effects: from n/a through 2.4.9...
CVE-2024-38741: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Noor-E-Alam Amazing Hover Effects allows Stored XSS.This issue affects Amazing Hover Effects: from n/a through 2.4.9...
PT-2024-28185 · Unknown · Noor-E-Alam Amazing Hover Effects
Name of the Vulnerable Software and Affected Versions: Noor-E-Alam Amazing Hover Effects versions through 2.4.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...
CVE-2024-4780 Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihelink’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Image Hover Effects – Elementor Addon plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via eihelink Parameter vulnerability discovered by wesley wcraft in WordPress Plugin Image Hover Effects – Elementor Addon versions = 1.4.3...
WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software Image Hover Effects – Elementor Addon Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4780 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68d93193adc6 Credits...
PT-2024-32819
Name of the Vulnerable Software and Affected Versions Image Hover Effects – Elementor Addon plugin for WordPress versions up to, and including, 1.4.3 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticat...
CVE-2024-4780: Improper Neutralization of Input During Web Page Generation
The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihelink’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Amazing Hover Effects plugin <=2.4.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Amazing Hover Effects versions = 2.4.9...
WordPress Amazing Hover Effects Plugin <=2.4.9 is vulnerable to Cross Site Scripting (XSS)
Software Amazing Hover Effects Type Plugin Vulnerable versions =2.4.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38741 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e171adbb497e Credits Joshua Chan Required privilege...
CVE-2024-37546
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: from n/a through 3.0.2...
CVE-2024-37546
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: from n/a through 3.0.2...
CVE-2024-37546 WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: from n/a through 3.0.2...