111 matches found
CVE-2023-46776
A vulnerability in J0SiE Auto Excerpt everywhere auto-excerpt-everywhere.This issue affects Auto Excerpt everywhere: from n/a through = 1.5...
CVE-2023-46776
Cross-Site Request Forgery CSRF vulnerability in Serena Villa Auto Excerpt everywhere plugin = 1.5 versions...
WordPress Plugin auto-excerpt-everywhere Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Fedora: Security Advisory (FEDORA-2023-035866b576)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for icecat (FEDORA-2023-7342330743)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: icecat-115.3.1-7.rh2.fc38
GNU IceCat is the GNU version of the Firefox ESR browser. Extensions included to this version of IceCat: LibreJS GNU LibreJS aims to address the JavaScript problem described in the article "The JavaScript Trap" of Richard Stallman. HTTPS Everywhere HTTPS Everywhere is an extension that encrypts...
WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)
Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24663 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 39f7e97ee70f Credits Ramuel Gall Required privilege...
WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)
Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24664 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 03f2a970e135 Credits Ramuel Gall Required privilege...
WordPress PHP Everywhere Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)
Software PHP Everywhere Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2022-24665 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 613af699ce95 Credits Ramuel Gall Required privilege...
everywherecatering.com Cross Site Scripting vulnerability OBB-2737435
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in mwembed-dash-everywhere (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4742 Malicious code in mwembed-dash-everywhere (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-36537
A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...
Sql injection
A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...
Everywhere CMS SQL注入漏洞
Everywhere CMS is a content management system from Everywhere, Inc. A security vulnerability exists in Everywhere CMS, which stems from an sql injection issue caused by manipulation of the parameter id...
CVE-2020-36537
Everywhere CMS is affected by a SQL injection vulnerability triggered by manipulation of the id parameter. The attack surface is the Everywhere CMS component reference to an unknown function, with remote exploit possible. Details across connected sources consistently classify the issue as critica...
CVE-2020-36537 Everywhere CMS sql injection
A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...
Fedora: Security Advisory for icecat (FEDORA-2022-42ea499a7d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP Everywhere Plugin for WordPress < 3.0.0 Remote Code Execution
The WordPress PHP Everywhere Plugin installed on the remote host is affected by multiple remote code execution vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
The vulnerability of the wp_ajax_parse_media_shortcode() function in the PHP plugin for implementing PHP Everywhere allows a hacker to execute arbitrary code.
The vulnerability of the wpajaxparsemediashortcode function in the PHP plugin for implementing PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...