CVE-2024-31094

CVE-2024-31094 affects Filter Custom Fields & Taxonomies Light (WordPress). The issue is described as Deserialization of Untrusted Data (PHP object injection) in the plugin up to version 1.05. The Red Hat entry and a Wordfence vulnerability listing confirm the vulnerability exists in this plugin ...

CVE-2023-50311

CVE-2023-50311 affects IBM CICS Transaction Gateway for Multiplatforms (Desktop Edition) versions 9.2 and 9.3. The Red Hat/IBM bulletin and IBM security pages describe an information-disclosure flaw where sensitive path information could be exposed via debugging or error messages, reflecting a we...

CVE-2024-25027

IBM Security Verify Access (Docker container 10.0.x) is affected by CVE-2024-25027, an information-disclosure vulnerability caused by missing encryption that can expose sensitive snapshot information. The IBM Security bulletin lists a base score of 6.2 and notes the vulnerability affects ISVA 10....

CVE-2024-3118

Dreamer CMS (up to version 4.1.3) contains a vulnerability in the Attachment Handler component that allows permission issues via remotely initiated abuse. The public disclosure (exploit) is noted in multiple sources (NVD, Red Hat, CVE listing, etc.). The description consistently cites “unknown pr...

CVE-2023-46808

CVE-2023-46808 is an authenticated remote file-write vulnerability in Ivanti Neurons for ITSM (affecting on-premises versions 2023.1–2023.3). Successful exploitation can write files to sensitive directories and lead to code execution in the web app user context. Public advisories indicate patches...

CVE-2024-3117

CVE-2024-3117 affects YouDianCMS up to version 9.5.12. The vulnerability resides in the file handling path for ChannelAction.class.php (as reported across sources with slightly different path notation) and is triggered by manipulating the file argument, leading to unrestricted file upload. Remote...

CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 is affected. The issue arises in the Icon Handler which does not prevent icons containing non-image data (e.g., ""), allowing such data to be processed. This is documented across multiple sources (NVD/Red Hat/OSV) with CVSS 3.1 base metrics indicating high imp...

CVE-2024-3091

PHPGurukul Emergency Ambulance Hiring Portal v1.0 is affected by a cross-site scripting vulnerability in /admin/search.php (Search Request Page). The issue originates from an unspecified function in that file, enabling remote exploitation. Multiple connected sources confirm the vulnerability, wit...

CVE-2024-3090

CVE-2024-3090 affects the PHPGurukul Emergency Ambulance Hiring Portal 1.0, specifically the Add Ambulance Page’s file /admin/add-ambulance.php. The vulnerability is a cross-site scripting (XSS) issue triggered by manipulating the Ambulance Reg No/Driver Name parameters, as described in the CVE r...

CVE-2024-3088

The CVE-2024-3088 entry describes a SQL injection in PHPGurukul Emergency Ambulance Hiring Portal 1.0, via the /admin/forgot-password.php username parameter. It is exploitable remotely and has been publicly disclosed (VDB-258681). The available connected docs confirm the affected component and ro...

CVE-2024-30431

CVE-2024-30431 describes a Reflected XSS in the WordPress plugin Mang Board WP . The issue is caused by improper input neutralization during web page generation, affecting Mang Board WP versions from n/a through 1.8.0. Connected sources confirm the vulnerability type and affected version range; n...

CVE-2024-30433

CVE-2024-30433: Stored XSS in MultiVendorX (DC-woocommerce-multi-vendor) WC Marketplace plugin. Affected: WC Marketplace versions up to 4.1.3. Root cause: improper neutralization of input during web page generation. Impact: potential cross-site scripting; estimated CVSS v3.1 base score 6.5 (Mediu...

CVE-2024-30434

Technical details for CVE-2024-30434 are not provided in the connected documents. Public information about affected product/version/impact is unavailable here; monitor for updates from vendors/security advisories.

CVE-2024-30435

CVE-2024-30435 affects POSIMYTH The Plus Blocks for Block Editor (Gutenberg) with vulnerable versions:

CVE-2024-30436

CVE-2024-30436 is a Stored XSS in Collect.chat WordPress plugin. Affected: Collect.chat (WordPress plugin) up to version 2.4.1. Root cause: improper neutralization of input during web page generation. Impact: stored cross-site scripting could be triggered within authenticated sessions (Contributo...

CVE-2024-30438

CVE-2014-30438 details (from provided sources): An improper neutralization of input during web page generation in the WordPress plugin’s Print Page block allows a Stored XSS. Affected component: the Print Page block in bPlugins. Affected versions: from n/a through 1.0.8. Consequence: Stored Cross...

CVE-2024-30439

CVE-2024-30439 is a reflected XSS in BestWebSoft Limit Attempts plugin for WordPress, caused by improper neutralization of input during web page generation. Affected versions are from n/a up to 1.2.9. Public records (Red Hat entry) confirm the root cause and vulnerability class but do not specify...

CVE-2024-30442

CVE-2024-30442 affects WordPress Bold Page Builder up to version 4.8.0. The issue is an Improper Neutralization of Input During Web Page Generation, i.e., a Stored XSS in the plugin. Evidence across sources indicates the vulnerable component is the Bold Page Builder plugin (WordPress ecosystem) a...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-info - CVE-2024-3094 PoC Exploration https://gi...

CVE-2024-30444

CVE-2024-30444 describes a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Zion Builder (zionbuilder.io). According to the Red Hat entry, the issue is caused by improper neutralization of input during web page generation, enabling stored XSS. The vulnerability affects Zion...