9601 matches found
SourceCodester Contact Manager with Export to VCF SQL注入漏洞
SourceCodester Contact Manager with Export to VCF is a SourceCodester open source contact manager. A SQL injection vulnerability exists in SourceCodester Contact Manager with Export to VCF version 1.0, which stems from an incorrect operation of the parameter contact that can lead to SQL injection...
PT-2024-26060 · Google · Android
Name of the Vulnerable Software and Affected Versions: FeliCaTest versions prior to SMR Sep-2024 Release 1 Description: The issue allows local attackers to enable NFC configuration due to improper export of Android application components. Recommendations: For versions prior to SMR Sep-2024 Releas...
PT-2024-26074 · M Files · My Files
Name of the Vulnerable Software and Affected Versions: My Files versions prior to SMR Sep-2024 Release 1 Description: The issue concerns an improper export of an android application component in My Files, allowing local attackers to access files with the privilege of My Files. This enables...
NFS Mount Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NFS Mount Scanner', 'Description' = %q This module scans NFS mounts and their permissions. , 'Author' = '', 'References' = 'CVE', '1999-0170',...
WordPress All-in-One Migration Export
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress All-in-One Migration Export', 'Description' = %q This module allows you to export Wordpress data such as the database, plugins, themes,...
SuiteCRM Authenticated SQL Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SuiteCRM authenticated SQL injection in export functionality', 'Description' = %q This module exploits an authenticated SQL injection in SuiteCRM...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
CVE-2024-6586
Lightdash v0.1024.6 is affected by a Server-Side Request Forgery (SSRF) in the dashboard export function. A dashboard containing HTML elements that reference an attacker-controlled source can trigger an HTTP request to an external domain when exported, potentially exposing the exporting user’s se...
CVE-2024-6586
Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threat actor controlled source can trigger an SSRF request when exported, via a POST request to...
GO-2024-3095 Mattermost Plugin Channel Export excessive resource consumption in github.com/mattermost/mattermost-plugin-channel-export
Mattermost Plugin Channel Export excessive resource consumption in github.com/mattermost/mattermost-plugin-channel-export...
CVE-2024-8337
A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...
CVE-2024-8337
A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...
CVE-2024-8337
The CVE-2024-8337 entry affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability is a Cross-Site Scripting in the index.html, caused by manipulating the contact_name argument. Affected functionality is unknown in detail across sources, but multiple documents state the issu...
Lightdash 安全漏洞
Lightdash is a visual data analysis tool from Lightdash open source. A security vulnerability exists in Lightdash version 0.1024.6, which stems from a server-side request forgery SSRF issue that could allow a threat participant to obtain a user's session token when the user exports a dashboard th...
SourceCodester Contact Manager with Export to VCF 跨站脚本漏洞
SourceCodester Contact Manager with Export to VCF is an open source contact manager from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Contact Manager with Export to VCF version 1.0, which stems from the parameter contactname in the file index.html that can lead to...
CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...
CVE-2024-45233
An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configuration of the Powermail Frontend plugins...
WordPress plugin Gutentor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
