CVE-2024-10834

eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to os.path.join, enabling an attacker to write files to arbitrary locations on the target server. Thi...

CVE-2024-54129

creationtimestamp| type| source ---|---|--- 2024-12-05 15:21:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113600895756889464 2024-12-05 17:52:10+00:00| seen| https://t.me/cvedetector/12112...

CVE-2022-29489

CVE-2022-29489 describes a CSRF vulnerability in the WordPress Sucuri Security plugin (versions

CVE-2022-29489: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sucuri Security plugin = 1.8.33 at WordPress leading to Event log entry creation...

CVE-2022-26210

creationtimestamp| type| source ---|---|--- 2022-03-16 01:20:01+00:00| seen| https://t.me/cibsecurity/38990 2022-04-02 18:51:58+00:00| seen| https://t.me/NeKaspersky/2069 2022-04-04 16:37:00+00:00| seen| https://t.me/truesecator/2804 2025-04-23 09:42:57+00:00| seen|...

CVE-2021-24794

The Connections Business Directory WordPress plugin before 10.4.3 does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed...

Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting

The plugin does not escape the Address settings when creating an Entry, which could allow high privilege users to perform Cross-Site Scripting when the unfilteredhtml capability is disallowed. PoC Add an Entry /wp-admin/admin.php?page=connectionsadd and put the following payload in the Address Li...

ProjectWorlds College Management System Cross-Site Request Forgery Vulnerability

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

aoblogger 2.3 create.php Unauthenticated Entry Creation

No description provided by source. source: http://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

CVE-2010-1498

creationtimestamp| type| source ---|---|--- 2010-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12280...

[eVuln] aoblogger Multiple Vulnerabilities

New eVuln Advisory: aoblogger Multiple Vulnerabilities http://evuln.com/vulns/37/summary/bt/ --------------------Summary---------------- Software: aoblogger Sowtware's Web Site: http://mikeheltonisawesome.com/ Versions: 2.3 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote...