CVE-2023-46963

CVE-2023-46963 affects Yunfan Learning Examination System v6.5 from Beijing Yunfan Internet Technology Co.; reported as an information disclosure via the login password parameter. The vulnerability is described as allowing a remote attacker to obtain sensitive data during login. Public details in...

CVE-2023-32741 WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2...

CVE-2023-32741

CVE-2023-32741 covers a SQL Injection vulnerability in the WordPress plugin “Contact Form to Any API” (versions

CVE-2023-32741: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2...

CVE-2023-43295

Cross Site Request Forgery vulnerability in Click Studios SA Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code via a crafted request...

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-94089)

EG2000SE is a router product. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-94096)

EG2000SE is a router product. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602

CVE-2023-45602 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Shopfiles Ltd Ebook Store plugin for WordPress. Public references indicate affected versions are up to 5.785 (some sources list up to 5.784/5.8002). The issue is caused by reflected XSS and could enabl...

CVE-2023-45602 WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

CVE-2023-45602: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...

Command Execution Vulnerability in Tianyue Network Security Audit System of Qixingchen Information Technology Group Co. Ltd (CNVD-2023-85472)

Providence Peak Network Security Audit System is a compliance management system for fine-grained auditing of network operation behaviors in business environments. A command execution vulnerability exists in the Tianyue Network Security Audit System of Qixing Information Technology Group Co., Ltd,...

CVE-2023-38817

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echodriver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by...

Code injection

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echodriver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by...

CVE-2023-38817

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echodriver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by...

CVE-2023-38817

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echodriver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by...

CVE-2023-38817

The echo.ac anti-cheat scanner tool, developed by Inspect Element Ltd , contains a privilege escalation vulnerability in the echo_driver.sys component. This issue allows a local attacker to gain elevated privileges by sending a crafted command to the driver. The vulnerability affects 64-bit versi...

CVE-2023-41854

Cross-Site Request Forgery CSRF vulnerability in Softaculous Ltd. WpCentral plugin = 1.5.7 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Softaculous Ltd. WpCentral plugin = 1.5.7 versions...

CVE-2023-41854

CVE-2023-41854 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress wpCentral plugin, affecting versions 1.5.7 and earlier. Public sources consistently state the issue allows unauthenticated CSRF actions against the plugin. Remediation advised by sources is to upgrade to a versio...