17766 matches found
CVE-2023-31294
The CVE-2023-31294 issue affects Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6, where a CSV Injection flaw in the Delivery Name field can cause information disclosure. Root cause: improper handling of the Delivery Name in CSV output enables crafted input to be interpreted as CSV, reveali...
CVE-2022-36399
CVE-2022-36399 affects the WordPress plugin Booked - Appointment Booking for WordPress (up to version before 2.4.4). It exposes sensitive data to unauthenticated actors due to improper access control. Fixed in version 2.4.4. Upgrading to 2.4.4+ mitigates the issue; no exploit details are provided...
CVE-2023-27447
CVE-2023-27447 affects VeronaLabs WP SMS – Messaging & SMS Notification for WordPress (WordPress WP SMS Plugin) up to version 6.0.4. The issue exposes sensitive information to an unauthenticated actor (information disclosure). Patch availability: fixed in 6.0.4.1; recommended action: update to a ...
Potential CSV export data leak
Impact In ActiveAdmin versions prior to 2.12.0, a concurrency issue was found that could allow a malicious actor to be able to access potentially private data that belongs to another user. The bug affects the functionality to export data as CSV files, and was caused by a variable holding the...
CVE-2023-7116
creationtimestamp| type| source ---|---|--- 2023-12-27 17:27:11+00:00| seen| https://t.me/ctinow/159708 2024-01-19 15:16:30+00:00| seen| https://t.me/ctinow/170229 2025-06-24 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymlk2sg26...
CVE-2023-50294
The CVE-2023-50294 issue affects GROWI prior to v6.0.6, where the App Settings page (/admin/app) stores the Secret access key in cleartext. An attacker who can access this page could obtain the external service secret key. The Red Hat, NVD, OSV, and JVN entries corroborate this vulnerability and ...
CVE-2023-51772
CVE-2023-51772 affects One Identity Password Manager before 5.13.1. The vulnerability arises from the login screen’s Kiosk mode workflow, which launches a Chromium-based browser to reset Active Directory passwords. The root cause enables an attacker to escape the kiosk sandbox by navigating throu...
GHSA-HWCC-4CV8-CF3H
creationtimestamp| type| source ---|---|--- 2023-12-22 21:02:53+00:00| seen| https://t.me/ctinow/158609 2024-01-18 09:41:40+00:00| seen| https://t.me/ctinow/169635...
Ben Rothke’s Review of A Hacker’s Mind
Ben Rothke chose A Hackers Mind as "the best information security book of 2023."...
CVE-2023-48723
CVE-2023-48723 is flagged as withdrawn by the CNA. In the connected PT-2023-30926 entry, the affected software is Student Result Management System v1.0, with an unauthenticated SQL Injection vulnerability in add_results.php where the rno parameter is not validated and is sent unfiltered to the da...
CVE-2023-48717
The Connected document PT-2023-30920 documents an unauthenticated SQL Injection in Student Result Management System (SRMS) v1.0. The flaw is in add_classes.php where the class name parameter is not validated or filtered, and input is sent unfiltered to the database, enabling SQL injection. This c...
CVE-2023-50831
CVE-2023-50831 corresponds to a Stored XSS vulnerability in the CURCY – Multi Currency for WooCommerce plugin by VillaTheme. The description states improper neutralization of input during web page generation leading to stored cross-site scripting, affecting CURCY for WooCommerce versions up to 2....
CVE-2023-45116
Summary: CVE-2023-45116 concerns Online Examination System v1.0 where the 'demail' parameter of /update.php is vulnerable to authenticated SQL injection due to unfiltered input. Multiple sources describe the vulnerability as enabling unvalidated characters to reach the database, with high impact ...
CVE-2023-2487
CVE-2023-2487 : The WordPress plugin WP Ultimate Exporter (Export All Posts, Products, Orders, Refunds & Users) is affected up to version 2.4.1, exposing sensitive data to unauthenticated actors. Root cause is information disclosure via the plugin’s export functionality, enabling access to data a...
CVE-2023-49162
CVE-2023-49162 affects the BigCommerce For WordPress plugin for WordPress, in versions up to 5.0.6. The issue is Exposure of Sensitive Information to an Unauthorized Actor (log/file exposure), allowing unauthenticated access to sensitive data. Public details in connected documents indicate the vu...
CVE-2023-32590
creationtimestamp| type| source ---|---|--- 2023-12-20 16:23:54+00:00| seen| https://t.me/ctinow/157118 2024-01-13 15:21:54+00:00| seen| https://t.me/ctinow/167852 2025-01-19 21:02:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pubdvri2x 2025-02-24 15:46:41+00:00| seen...