CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

PT-2021-10363

Name of the Vulnerable Software and Affected Versions: Textpattern version 4.7.3 Description: The issue concerns an arbitrary file load via the file insert function in include/txp file.php. Recommendations: For Textpattern version 4.7.3, consider disabling the file insert function in include/txp...

Froala 3.2.6-1 Cross Site Scripting Vulnerability

Exploit Title: Stored XSS and Html Code Injection Editor Froala Version 3.2.6-1 Author: Vincent666 ibn Winnie Software Link: https://froala.com/wysiwyg-editor/ Tested on: Windows 10 Web Browser: Mozilla Firefox My Youtube Channel: https://www.youtube.com/channel/UCZOWpC2dW9sipPq5z63C2rQ PoC: In t...