Lucene search
+L

682 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.5 views

Malicious code in Be.Vlaandеren.Basisregisters.ParcelRegistrу.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.5 views

Malicious code in Be.Vlaandеren.Basіsregisters.PаrcelRegistrу.Api.CrabImport (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:25 p.m.5 views

Malicious code in Be.Vlaaոderen.Basisregisters.ParcelRegistry.Aрi.BасkOffice (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.9 views

Malicious code in Be.Vlaaոderen.Basisrеgisters.ParcelRegistry.Aрi.Extraсt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.5 views

Malicious code in Be.Vlaаnderen.Basіsregisters.ParcelRegistry.Prоjeсtor (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:24 p.m.5 views

Malicious code in Be.Vlaаndereո.Basisregisters.ParcеlRegіstry.Api.BackOffice.Abstractions (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/02 12:00 a.m.11 views

PT-2025-2844 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There have been...

8.5CVSS6.6AI score
SaveExploits0References6
OSV
OSV
added 2024/05/16 5:15 a.m.13 views

CVE-2024-4945

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file viewparcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS4.9AI score0.00869EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.13 views

PT-2024-33536 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue has been found, affecting an unknown function of the file view parcel.php. The manipulation of the id argument leads to unrestricted upload. This issue...

9.8CVSS7AI score0.00869EPSS
SaveExploits1References7
OSV
OSV
added 2024/02/15 11:15 p.m.10 views

CVE-2023-40109

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch BAL due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score0.00186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/15 12:00 a.m.11 views

PT-2024-12847 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the createFromParcel method of UsbConfiguration.java. This could lead to a background activity launch, resulting in local escalation of...

7.8CVSS6.8AI score0.00186EPSS
SaveExploits0References7
WPVulnDB
WPVulnDB
added 2024/01/24 12:00 a.m.14 views

WooCommerce Parcel Pro < 1.6.12 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

7.1AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/19 10:15 p.m.13 views

CVE-2023-46624

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...

6.1CVSS5.8AI score0.00414EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/19 10:15 p.m.51 views

CVE-2023-46624

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...

6.1CVSS0.00414EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/19 10:15 p.m.31 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...

5.8CVSS7.1AI score0.00414EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/19 9:38 p.m.76 views

CVE-2023-46624

CVE-2023-46624 - Open Redirect in Parcel Pro (WordPress plugin) Affected software: Parcel Pro (WordPress plugin) up to version 1.6.11. Root cause/impact: Open Redirect via a redirect URL parameter or similar flow, enabling redirection to an untrusted site. Exploit status: Unauthenticated exploita...

6.1CVSS7AI score0.00414EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/19 9:38 p.m.17 views

CVE-2023-46624 WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...

4.7CVSS7AI score0.00414EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/19 9:38 p.m.57 views

CVE-2023-46624 WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11...

4.7CVSS6.5AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/19 12:00 a.m.12 views

WordPress Plugin Parcel Pro Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...

6.1CVSS8.7AI score0.00414EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/04 11:15 p.m.35 views

CVE-2023-45777

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

7.8CVSS0.00345EPSS
SaveExploits0References3
Rows per page
Query Builder