CVE-2025-32676 WordPress Verowa Connect plugin <= 3.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through = 3.0.5...

CVE-2025-32676

CVE-2025-32676 corresponds to an authenticated (Administrator+) SQL Injection in Verowa Connect (WordPress plugin). Affected software: Verowa Connect

sport-planet.eu Cross Site Scripting vulnerability OBB-4042725

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-28864

Cross-Site Request Forgery CSRF vulnerability in Planet Studio Builder for Contact Form 7 by Webconstruct cf7-builder allows Cross Site Request Forgery.This issue affects Builder for Contact Form 7 by Webconstruct: from n/a through = 1.2.2...

CVE-2025-28864

Cross-Site Request Forgery CSRF vulnerability in planetstudio Builder for Contact Form 7 by Webconstruct cf7-builder allows Cross Site Request Forgery.This issue affects Builder for Contact Form 7 by Webconstruct: from n/a through = 1.2.2...

CVE-2025-28864

Cross-Site Request Forgery CSRF vulnerability in Planet Studio Builder for Contact Form 7 by Webconstruct allows Cross Site Request Forgery. This issue affects Builder for Contact Form 7 by Webconstruct: from n/a through 1.2.2...

CVE-2025-28864

CVE-2025-28864 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Builder for Contact Form 7 by Webconstruct . The vulnerability affects plugin versions up to and including 1.2.2 (reported as affected “from n/a through 1.2.2”). Public sources in the Connected Docu...

The vulnerability of microprogrammed software in PLANET Technology switches arises from the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of PLANET Technology’s microprogrammed software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTTP request...

Vulnerability of microprogrammed software in PLANET Technology switches, related to buffer overflow in the stack, allowing a hacker to execute arbitrary code.

The vulnerability of PLANET Technology’s microprogrammed switching software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTTP request...

The vulnerability of microprogrammed software in PLANET Technology switches, related to a countable loss of significance, allows attackers to trigger a service failure.

The vulnerability of PLANET Technology’s microprogrammed software is related to a countable degree of significance loss. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through a specially created malicious HTTP request...

CVE-2024-52558 Planet Technology Planet WGS-804HPT Integer Underflow

The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program...

CVE-2024-52558 Planet Technology Planet WGS-804HPT Integer Underflow

The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program...

CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection

The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution...

CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection

The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution...

CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...

CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker can exploit this vulnerability to remotely execute code by sending commands via malicious HTTP requests...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker could exploit this vulnerability to send a malicious HTTP request that would cause the web server to remotely execute code b...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker can exploit this vulnerability to send a malformed HTTP request, which could cause the program to crash...

CVE-2024-53759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Planet Studio ArCa Payment Gateway arca-payment-gateway allows Stored XSS.This issue affects ArCa Payment Gateway: from n/a through = 1.3.1...