CVE-2024-4611

CVE-2024-4611 – AppPresser (WordPress plugin) affects versions up to 4.3.2. The root cause is improper missing encryption exception handling in the functions decrypt_value and doCookieAuth, which can allow an unauthenticated attacker to log in as any existing user (e.g., admin) if the openssl PHP...

CVE-2023-6743

CVE-2023-6743 concerns the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates). Affected versions are all up to and including 1.5.89, with a reported RCE via the template import functionality. Exploitation requires authenticated access at Contributor level or highe...

CVE-2024-0434

CVE-2024-0434 affects the WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly (versions ≤ 1.7.1). The vulnerability arises from a missing capability check in the ttbm_new_place_save function, enabling unauthenticated attackers to modify data and to publish new place posts. The iss...

CVE-2024-5150

The Login with phone number plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.26. This is due to the 'activationcode' default value is empty, and the not empty check is missing in the 'lwpajaxregister' function. This makes it possible for...

CVE-2024-5150

The CVE-2024-5150 entry concerns the WordPress plugin Login with phone number, with authentication bypass in versions up to and including 1.7.26. The root cause is an empty default value for activation_code and a missing non-empty check in the lwp_ajax_register function, enabling unauthenticated ...

CVE-2024-5437

Affected software: SourceCodester Simple Online Bidding System 1.0. The vulnerability is in the save_category function (file /admin/index.php?page=categories) where manipulating the argument name triggers cross-site scripting (XSS). Exploitation is possible remotely and publicly disclosed (VDB-26...

CVE-2024-36112

CVE-2024-36112 affects Nautobot: in 1.3.0–1.6.22 and 2.0.0–2.2.4, listing members of Dynamic Groups via the UI or API does not enforce member-object permissions, enabling a user with extras.view_dynamicgroup to see all Group members regardless of dcim.view_device. Fixed in Nautobot 1.6.23 and 2.2...

CVE-2023-30312

An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...

CVE-2024-23579

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values...

CVE-2023-30314

CVE-2023-30314 affects 360 V6G, 360 T5G, 360 T6M and 360 P1 routers. The issue enables attackers to hijack TCP sessions, potentially causing denial of service. Root cause and scope are documented in sources such as PT-2024-12233, which lists affected models and describes the impact as TCP session...

CVE-2024-23580

The CVE-2024-23580 entry concerns HCL DRYiCE Optibot Reset Station. Affected component: the OTP handling/encryption mechanism, where insecure encryption could allow an attacker with database access to recover some or all encrypted OTP values. Documented impact focuses on confidentiality (HIGH) wi...

CVE-2024-23579

The CVE-2024-23579 entry concerns HCL DRYiCE Optibot Reset Station, where insecure encryption of security questions could let an attacker with database access recover some or all encrypted values. According to CVSS 3.1, the issue has a base score of 6.5 (Medium) with Network attack vector, Low at...

CVE-2024-35548

A SQL injection vulnerability in Mybatis plus versions below 3.5.6 allows remote attackers to obtain database information via a Boolean blind injection. NOTE: the vendor's position is that this can only occur in a misconfigured application; the documentation discusses how to develop applications...

CVE-2024-35226

Smarty (PHP template engine) is affected; in affected versions, template authors can inject PHP code by supplying a malicious file name to an extends-tag, enabling potential code execution. Debian/Ubuntu advisories indicate patches exist (e.g., smarty4 fix in Debian DSA-5830; Ubuntu USN- has secu...

CVE-2024-35511

The CVE affects phpgurukul Men Salon Management System v2.0. The vulnerable component is the /msms/admin/index.php endpoint, where the username parameter is susceptible to SQL Injection due to insufficient input handling. This can enable an attacker to manipulate queries and potentially gain unau...

CVE-2024-35548

CVE-2024-35548 is a SQL injection vulnerability in MyBatis-Plus versions below 3.5.6. The issue allows remote attackers to obtain database information via a Boolean blind injection. The vendor notes this can only occur in misconfigured applications, and guidance exists to develop applications tha...

CVE-2024-22641

CVE-2024-22641 affects TCPDF and causes Regular Expression Denial of Service when parsing specially crafted SVG files. Public reports show multiple distributions addressing it: Debian (bookworm: 6.6.2+dfsg1-1+deb12u1; bullseye: 6.3.5+dfsg1-1+deb11u1), Fedora (6.7.7), and Debian LTS DSAs provide f...

CVE-2024-28060

An issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arbitrary code every time the product is executed...

CVE-2023-30308

An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...