4517 matches found
PT-2024-40737
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A crash issue has been identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5SL first, H5FS sect find, and H5MF find sect. Recommendations: At the moment,...
CVE-2024-1756
The WooCommerce Customers Manager WordPress plugin, versions prior to 29.8 , is vulnerable to an information disclosure flaw due to a lack of authorization and CSRF protections in an AJAX action. This vulnerability allows any authenticated user, such as a subscriber , to call the affected action ...
PT-2024-5247 · National Instruments · Labview
Name of the Vulnerable Software and Affected Versions: LabVIEW versions prior to 2024 Q1 Description: A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to...
penguinfirsteditions.com Cross Site Scripting vulnerability OBB-3920445
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-29029 memos vulnerable to an SSRF in /o/get/image
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current...
CVE-2024-29029
Memos: CVE-2024-29029 describes an SSRF flaw at the /o/get/image endpoint in memos 0.13.2 that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is echoed into the current server response, enabling a reflected XSS. The vulnerab...
CVE-2024-29028 memos vulnerable to an SSRF in /o/get/httpmeta
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...
CVE-2024-31651
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
penguinfirsteditions.com Cross Site Scripting vulnerability OBB-3918218
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 Compromise Checker A very simple bash script to...
CVE-2024-29844
Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...
CVE-2024-31651
The Cosmetics and Beauty Product Online Store v1.0 is vulnerable to a cross-site scripting (XSS) flaw caused by the improper neutralization of input during web page generation. Attackers can inject a crafted payload into the First Name parameter to execute arbitrary web scripts or HTML. This vuln...
CVE-2024-31651
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
Cosmetics and Beauty Product Online Store has a security vulnerability
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the First Na...
PT-2024-24177 · Unknown · Cosmetics/Beauty Product Online Store
Name of the Vulnerable Software and Affected Versions: Cosmetics and Beauty Product Online Store version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. This enables attackers...
CVE-2024-31651: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
CVE-2024-31651
A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...
CVE-2023-29483
creationtimestamp| type| source ---|---|--- 2024-04-13 01:31:03+00:00| seen| https://t.me/arpsyndicate/4623 2024-04-14 00:50:41+00:00| seen| https://t.me/arpsyndicate/4667...
