741 matches found
CVE-2024-0827: Cross-Site Request Forgery (CSRF)
The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.4. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticat...
EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2024-1228)
According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the fil...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
Sql injection
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
CVE-2024-25849
The PrestaToolKit "Make an offer" (makeanoffer ) module for PrestaShop is vulnerable to SQL injection in versions 1.7.1 and earlier . A guest user can exploit this vulnerability via the MakeOffers::checkUserExistingOffer() and MakeOffers::addUserOffer() functions. The impact is severe, potentiall...
CVE-2024-25849
In the module "Make an offer" makeanoffer = 1.7.1 from PrestaToolKit for PrestaShop, a guest can perform SQL injection via MakeOffers::checkUserExistingOffer and MakeOffers::addUserOffer...
PT-2024-21161 · Prestatoolkit · Prestatoolkit Make An Offer Module
Name of the Vulnerable Software and Affected Versions: PrestaToolKit Make an offer module version 1.7.1 and earlier Description: A SQL injection issue exists in the Make an offer module, allowing a guest to perform SQL injection via the MakeOffers::checkUserExistingOffer and...
how-to-make-money-with-google-adsense.htmlpublishing.com Cross Site Scripting vulnerability OBB-3845003
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
OESA-2024-1075 proftpd security update
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
PT-2024-10548 · Easyftp · Easyftp
Name of the Vulnerable Software and Affected Versions: EasyFTP version 1.7.0.2 Description: A critical issue was found in the MKD Command Handler component, which can be exploited remotely. The manipulation leads to a buffer overflow. Recommendations: For EasyFTP version 1.7.0.2, at the moment,...
EasyFTP Security Vulnerability
EasyFTP is an easy-to-use FTP service. A security vulnerability exists in EasyFTP version 1.7.0.2, which originates from an unknown function in the component MKD Command Handler that can easily lead to a buffer overflow...
sqlite: heap-buffer-overflow at sessionfuzz
A vulnerability has been identified in SQLite3. This issue affects the sessionReadRecord function of the ext/session/sqlite3session.c function in the make alltest Handler component. Manipulation may cause a heap-based buffer overflow to occur...
CentOS 8 : sqlite (CESA-2024:0253)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:0253 advisory. - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file...
make-up-design.com Cross Site Scripting vulnerability OBB-3834544
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-0504: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file addreserve.php of the component Make a Reservation Page. The manipulation of the argument Firstname/Lastname with the input...
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
CVE-2023-49471
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
CVE-2023-49471: Server-Side Request Forgery (SSRF)
Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...
PT-2024-13739 · Unknown · Karlomikus Bar Assistant
Name of the Vulnerable Software and Affected Versions: karlomikus Bar Assistant versions prior to 3.2.0 Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. It does not validate a parameter before making a request through Image::make, which could allow...