Opencart Divido - Sql Injection

OpenCart Divido plugin is susceptible to SQL injection id: CVE-2018-11231 info: name: Opencart Divido - Sql Injection author: ritikchaddha severity: high description: | OpenCart Divido plugin is susceptible to SQL injection impact: | This vulnerability can lead to data theft, unauthorized access,...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

Vite - Arbitrary File Read

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...

WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access

WordPress Welcart e-Commerce plugin before 2.8.5 is susceptible to arbitrary file access. The plugin does not validate user input before using it to output the content of a file, which can allow an attacker to read arbitrary files on the server, obtain sensitive information, modify data, and/or...

Ghost CMS <=4.32 - Cross-Site Scripting

Ghost CMS 4.0.0 to 4.3.2 contains a DOM cross-site scripting vulnerability. An unused endpoint added during the development of 4.0.0 allows attackers to gain access by getting logged-in users to click a link containing malicious code. id: CVE-2021-29484 info: name: Ghost CMS =4.32 - Cross-Site...

Piwigo 13.7.0 - SQL Injection

Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header User-Agent is vulnerable at the endpoint that records user information when logging in to the...

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. id: CVE-2023-29887 info: name: Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion author: ctflearner severity: high description: | A Local...

SuiteCRM - SQL Injection

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue. id: CVE-2024-36412 info: name: SuiteC...

AnythingLLM - Username Enumeration via Password Recovery

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

fixcve2023_39526_2023_39527

Correzione CVE 202339526 GHSA-gf46-prm4-56pc https://github.com/advisories/GHSA-gf46-prm4-56pc CVE 202339527 GHSA-xw2r-f8xv-c8xp https://github.com/advisories/GHSA-xw2r-f8xv-c8xp Prestashop risolve le vulnerabilità CVE-2023-39526 & CVE-2023-39527...

CVE-2014-4377

CydiaSubstrate-basierter Fix für CVE-2014-4377 Siehe github.com/feliam/cve-2014-4377 und http://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html...

cve-2021-33909

Correzione runtime del kernel per CVE-2021-33909 Questo repository costruisce un modulo fuori-albero chiamato "cve-2021-33909.ko". cve-2021-33909 risolve un problema nel layer del filesystem del kernel sostituendo le funzioni vulnerabili tramite kprobe durante l'esecuzione. Può essere compilato...

SplicePrivillegeEscalationFIX

Questo repository non contiene un README...

Log4j_CVE-2021-45046

Log4j 2.15.0 Escalação de Privilégios -- CVE-2021-45046 Ataque Descrição Foi descoberto que a correção para o CVE-2021-44228 no Apache Log4j 2.15.0 estava incompleta em certas configurações não padrão. Isso poderia permitir que atacantes com controle sobre os dados de entrada do Thread Context Ma...

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Informazioni di base Questo è un repository GitHub che contiene tutte le informazioni rilevanti su CVE-2018-7171. e altro CVE-2018-7171 rappresenta una vulnerabilità di directory/file traversal in TwonkyMedia Server versione 7.0.11-8.5 ultima...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Una piccola spiegazione di un bug di path traversal di Apache e di una correzione incompleta Task 1: Un po' di contesto... Una breve storia Il 5 ottobre 2021 è stato rilasciato un CVE che descrive un...

CVE-2023-43208

Vulnerabilità RCE in Mirth Connect CVE-2023-37679 e CVE-2023-43208 Questo script exploit e PoC sono scritti per un'analisi approfondita delle CVE su vsociety. CVE-2023-43208 è un grave bug di sicurezza in NextGen Mirth Connect, uno strumento utilizzato da ospedali e cliniche per condividere i dat...