CVE-2024-37232

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

CVE-2024-37232 WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

CVE-2024-37232

CVE-2024-37232 is a Missing Authorization vulnerability in Hercules Core (affected: versions n/a through 6.5) that allows exploitation through misconfigured Access Control settings, enabling unauthorized updates to core settings. The issue originates from an authority check flaw that fails to pro...

CVE-2024-37232 WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

WordPress plugin Hercules Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-27402 · Unknown · Hercules Core

Name of the Vulnerable Software and Affected Versions: Hercules Core versions n/a through 6.5 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured Access Control Security Levels. Recommendations: For versions n/a throu...

WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability

Subscriber+ Arbitrary Settings Change/Access vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Hercules Core versions = 6.5...

WordPress Hercules Core Plugin <= 6.5 is vulnerable to Settings Change

Software Hercules Core Type Plugin Vulnerable versions = 6.5 Fixed in 6.7 OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-37232 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 1152267cf25e Credits Dave Jong Patchstack Required privilege...

CVE-2024-30228

Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects Hercules Core : from n/a through 6.4...

CVE-2024-30228

CVE-2024-30228 affects the WordPress Hercules Core plugin (≤ 6.4). The vulnerability is a PHP Object Injection via deserialization of untrusted input, exploitable by authenticated users with subscriber-level access. Impact (as stated) can include deletion of arbitrary files, exposure of sensitive...

CVE-2024-30228 WordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects Hercules Core : from n/a through 6.4...

CVE-2024-30228 WordPress Hercules Core plugin <= 6.4 - Auth. PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This issue affects Hercules Core : from n/a through 6.4...

WordPress Plugin WP Hercules 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

WordPress Hercules Core Plugin <= 6.4 is vulnerable to PHP Object Injection

Software Hercules Core Type Plugin Vulnerable versions = 6.4 Fixed in 6.5 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30228 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID f62f114ea206 Credits Dave Jong Patchstack Required privilege...

herculesabrasives.com Cross Site Scripting vulnerability OBB-3164175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

herculesonline.com.br Cross Site Scripting vulnerability OBB-2444962

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

planecheck.com XSS vulnerability

Vulnerable URL: http://www.planecheck.com/aspsel2.asp?man==C130=Lockheed%20C-130%20Hercules=1"...

hercules-landscapes.eu XSS vulnerability

Vulnerable URL: http://www.hercules-landscapes.eu/blog.php?tag=well-being" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15161781 VIP website status:| No Check...

HERCULES: THE OFFICIAL GAME - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application HERCULES: THE OFFICIAL GAME published at the 'play' market has multiple vulnerabilities...