17607 matches found
GHSA-HWCC-4CV8-CF3H
creationtimestamp| type| source ---|---|--- 2023-12-22 21:02:53+00:00| seen| https://t.me/ctinow/158609 2024-01-18 09:41:40+00:00| seen| https://t.me/ctinow/169635...
Ben Rothke’s Review of A Hacker’s Mind
Ben Rothke chose A Hackers Mind as "the best information security book of 2023."...
CVE-2023-48723
CVE-2023-48723 is flagged as withdrawn by the CNA. In the connected PT-2023-30926 entry, the affected software is Student Result Management System v1.0, with an unauthenticated SQL Injection vulnerability in add_results.php where the rno parameter is not validated and is sent unfiltered to the da...
CVE-2023-48717
The Connected document PT-2023-30920 documents an unauthenticated SQL Injection in Student Result Management System (SRMS) v1.0. The flaw is in add_classes.php where the class name parameter is not validated or filtered, and input is sent unfiltered to the database, enabling SQL injection. This c...
CVE-2023-50831
CVE-2023-50831 corresponds to a Stored XSS vulnerability in the CURCY – Multi Currency for WooCommerce plugin by VillaTheme. The description states improper neutralization of input during web page generation leading to stored cross-site scripting, affecting CURCY for WooCommerce versions up to 2....
CVE-2023-45116
Summary: CVE-2023-45116 concerns Online Examination System v1.0 where the 'demail' parameter of /update.php is vulnerable to authenticated SQL injection due to unfiltered input. Multiple sources describe the vulnerability as enabling unvalidated characters to reach the database, with high impact ...
CVE-2023-2487
CVE-2023-2487 : The WordPress plugin WP Ultimate Exporter (Export All Posts, Products, Orders, Refunds & Users) is affected up to version 2.4.1, exposing sensitive data to unauthenticated actors. Root cause is information disclosure via the plugin’s export functionality, enabling access to data a...
CVE-2023-49162
CVE-2023-49162 affects the BigCommerce For WordPress plugin for WordPress, in versions up to 5.0.6. The issue is Exposure of Sensitive Information to an Unauthorized Actor (log/file exposure), allowing unauthenticated access to sensitive data. Public details in connected documents indicate the vu...
CVE-2023-32590
creationtimestamp| type| source ---|---|--- 2023-12-20 16:23:54+00:00| seen| https://t.me/ctinow/157118 2024-01-13 15:21:54+00:00| seen| https://t.me/ctinow/167852 2025-01-19 21:02:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pubdvri2x 2025-02-24 15:46:41+00:00| seen...
CVE-2023-5010
CVE-2023-5010 affects Student Information System v1.0. The vulnerability is a set of multiple authenticated SQL Injection flaws in marks.php where the coursecode parameter is not validated, sending unfiltered input to the database. The CVSS v3.1 base metrics indicate a HIGH impact (8.8) with NETW...
CVE-2023-6975
CVE-2023-6975 is described in the connected data as a path traversal vulnerability related to MLflow (BIT-MLFLOW-2023-6975 / GHSA ...), potentially allowing command execution and access to data and models. The supplied documents do not provide explicit affected versions or remediation details; no...
CVE-2023-50639
CVE-2023-50639 : A cross-site scripting (XSS) vulnerability exists in CuteHttpFileServer (CHFS) versions 1.0 and 2.0, originating from the file upload feature on the homepage. Exploitation could allow an attacker to obtain sensitive information via the uploaded file handling. Public sources consi...
CVE-2023-44991
CVE-2023-44991 affects the WordPress plugin Media File Renamer: Rename Files (Manual, Auto & AI) up to version 5.6.9. The vulnerability is an information disclosure via the plugin’s debug/log logging functionality, allowing an unauthenticated actor to access sensitive data. Multiple sources confi...
CVE-2023-44983
CVE-2023-44983 corresponds to Aruba HiSpeed Cache (WordPress plugin) with vulnerable versions
CVE-2023-6280
CVE-2023-6280 describes an XXE (XML External Entity) vulnerability in the 52North Web Processing Service (WPS). The issue affects 52North WPS versions prior to 4.0.0-beta.11, where the WebProcessingService servlet may process external entities, allowing an attacker to retrieve files by issuing HT...
CVE-2023-44982
CVE-2023-44982 affects the WordPress WP Retina 2x plugin (Jordy Meow Perfect Images) up to version 6.4.5. The issue is a sensitive information exposure vulnerability that allows an unauthenticated attacker to access confidential data. Affected versions: