720 matches found
CVE-2024-31279 WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0...
CVE-2024-31279 WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0...
WordPress Plugin Generate Child Theme 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-23924 · Unknown · Generate Child Theme
Name of the Vulnerable Software and Affected Versions: Generate Child Theme versions prior to 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Generate Child Theme. This issue can be exploited to perform unintended actions on a user's account. Recommendations: For versions pri...
Generate Child Theme < 2.0.1 - Cross-Site Request Forgery via process_create_form()
Description The Generate Child Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the processcreateform function. This makes it possible for unauthenticated attackers to generate a...
WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Generate Child Theme versions = 2.0...
Insurance Management System PHP And MySQL 1.0 Cross Site Scripting
Exploit Title:Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS Date: 2024-02-08 Exploit Author: Hakkı TOKLU Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16995/insurance-management-system-php-mysql.html Version: 1.0 Tested on:...
CVE-2024-2395
The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...
[SECURITY] Fedora 40 Update: jakarta-json-2.1.3-4.fc40
Jakarta JSON Processing provides portable APIs to parse, generate, transform, and query JSON documents...
CLSA-2024-1709839769 Fix CVE(s): CVE-2023-5678
SECURITY UPDATE: Denial of service could be encountered when generating excessively long DH keys or checking excessively long DH keys or parameters. - debian/patches/CVE-2023-5678.patch: Make DHcheckpubkey and DHgeneratekey safer yet. - CVE-2023-5678...
DEBIAN-CVE-2022-48629
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
CVE-2022-48629
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
CVE-2022-48629
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...
openSUSE: Security Advisory for podman (SUSE-SU-2023:0326-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-27570
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generateconfrouter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
LinBle LBT T300-T390 Security Vulnerability
The LinBle LBT T300-T390 is a 4G industrial router from China's LinBle. A security vulnerability exists in the LinBle LBT T300-T390 v2.2.1.8, which is caused by a buffer overflow in the ApCliSsid parameter of the generateconfrouter method...
PT-2024-21953 · Unknown · Lbt T300-T390
Name of the Vulnerable Software and Affected Versions: LBT T300-T390 version 2.2.1.8 Description: The issue is related to a stack overflow via the ApCliSsid parameter in the generate conf router function, allowing attackers to cause a Denial of Service DoS via a crafted POST request...
WordPress Plugin Login Lockdown Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-20352 · Unknown +1 · Prestashop +1
Name of the Vulnerable Software and Affected Versions: Ether Creation module "Generate barcode on invoice / delivery slip" ecgeneratebarcode for PrestaShop version 1.2.0 and earlier Description: A SQL injection issue exists in the module, allowing a guest to perform SQL injection. Recommendations...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop Generate barcode on invoice / delivery slip 1.2.0 and earlier versions,...