EUVD-2024-47590

Malicious code in bioql PyPI...

CVE-2024-6506

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrwlog" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also...

CVE-2024-6506 Information exposure vulnerability in the MRW plug-in

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrwlog" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also...

CVE-2024-6506 Information exposure vulnerability in the MRW plug-in

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrwlog" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also...

CVE-2024-6506

CVE-2024-6506 affects MRW plugin version 5.4.3, specifically the mrw_log functionality. The exposed data includes other customers’ order information and sensitive fields such as names and phone numbers, with an ability to create or overwrite shipping labels. The CVSSv3.1 base score is 8.2 (HIGH) ...

CVE-2024-6506: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrwlog" functionality. This vulnerability could allow a remote attacker to obtain other customers' order information and access sensitive information such as name and phone number. This vulnerability also...

PT-2024-37676 · Unknown · Mrw Plugin

Name of the Vulnerable Software and Affected Versions: MRW plugin version 5.4.3 Description: The issue is an information exposure vulnerability affecting the "mrw log" functionality. This could allow a remote attacker to obtain other customers' order information and access sensitive information...

MRW plugin information disclosure vulnerability

MRW plugin is a logistics transportation and services plugin from MRW Spain. An information disclosure vulnerability exists in MRW plugin version 5.4.3. A remote attacker could use this vulnerability to obtain order information from other customers and access sensitive information such as names a...

SUSE CVE-2019-13504

There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2...

SUSE CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

PYSEC-2019-246

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

DEBIAN-CVE-2019-13504

There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2...

MRW PHP Upload Remote file upload Vulnerability

No description provided by source. Date: 12/02/2010 Author: Phenom Software Link: http://www.mrwebmaster.it/store/script/phplukemrwupload.zip Version: Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | |...

MRW PHP Upload - Arbitrary File Upload

MRW PHP Upload - Arbitrary File Upload Date: 12/02/2010 Author: Phenom Software Link: http://www.mrwebmaster.it/store/script/phplukemrwupload.zip Version: Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | |...

MRW PHP Upload - Arbitrary File Upload

Date: 12/02/2010 Author: Phenom Software Link: http://www.mrwebmaster.it/store/script/phplukemrwupload.zip Version: Tested on: Windows xp sp3 ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || |||| ||//|| || ||...

MRW PHP shell upload vulnerability

Exploit for unknown platform in category web applications ================================== MRW PHP shell upload vulnerability ================================== Exploit Title: MRW PHP Upload Remote file upload Vulnerability Date: 12/02/2010 Author: Phenom Software Link:...

MRW PHP Shell Upload

Exploit Title: MRW PHP Upload Remote file upload Vulnerability Date: 12/02/2010 Author: Phenom Software Link: http://www.mrwebmaster.it/store/script/phplukemrwupload.zip Version: Tested on: Windows xp sp3 CVE : Code : ------------------------------------------------------ | | | | | | | | /| ' \ /...