CVE-2024-50921

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

PT-2024-34458 · Silicon · Z-Wave Series 700 +1

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiLabs Z-Wave Series 700 and 800 version 7.21.1 Description: The issue is related to insecure permissions in the Silicon Labs Z-Wave Series 700 and 800, which allow attackers to modify the wakeup interval of end devices in the...

CVE-2024-50931

CVE-2024-50931 affects Silicon Labs Z-Wave Series 500, version 6.84.0. The issue is insecure permissions in the Z‑Wave 500 stack, with impact described as Availability: High and I/O/Confidentiality/Integrity: None per the CVSS metrics; no exploitation status is provided in the documents. Red Hat ...

CVE-2024-53790

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows DOM-Based XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53791 WordPress Lenxel Core plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows DOM-Based XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53791

CVE-2024-53791 describes a Stored XSS in WordPress Lenxel Core plugin for Lenxel(LNX) LMS (Lenxel Core) with affected versions from n/a through 1.2.5. Root cause is improper input neutralization during web page generation. Exploitation could allow an attacker to inject scripts that run in the con...

CVE-2024-53791 WordPress Lenxel Core plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS allows Stored XSS.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through 1.2.5...

CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53790

CVE-2024-53790 corresponds to a Local File Inclusion/path traversal issue in the WordPress Lenxel Core plugin for Lenxel(LNX) LMS (Lenxel Core). Public details in connected sources indicate vulnerable versions include Lenxel Core up to 1.2.5, with Patchstack citing fixes up to 1.2.8. The root cau...

CVE-2024-53809

Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.4.1...

CVE-2024-53809

CVE-2024-53809 : A Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress plugin Namaste! LMS (Kiboko Labs) up to version 2.6.4.1. The CVE entry notes exposure across Namaste! LMS versions ≤ 2.6.4.1 and lists a MEDIUM (CVSS v3.1: 4.3) impact. Connected sources repeatedly describe t...

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

The post CloudGoat Official Walkthrough Series: ‘sqsflagshop’ appeared first on Rhino Security Labs...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.1.2...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kiboko Labs Watu Quiz allows SQL Injection.This issue affects Watu Quiz: from n/a through 3.4.2...

CVE-2024-52477

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

CVE-2024-52477

CVE-2024-52477 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Document & Data Automation from No-nonsense Labs that leads to Stored XSS. Affected versions are prior to 1.6.1; remediation is to update to 1.6.1 or later. The CVSS v3.1 base score is 7.1 (HIGH), with NET...

CVE-2024-52477 WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

CVE-2024-53792

CVE-2024-53792 concerns the Watu Quiz WordPress plugin. The vuln is an SQL Injection due to improper neutralization of special elements in SQL commands, affecting Watu Quiz versions n/a–3.4.2. Public materials indicate a fix/update is available: upgrade to a version later than 3.4.2. Some sources...