CVE-2023-44024

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp supercheckout v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component...

PT-2023-32074 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to...

PT-2023-29145 · Unknown · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Online Movie Ticket Booking System version 1.0 Description: The Online Movie Ticket Booking System is affected by an authenticated Stored Cross-Site Scripting issue. This allows attackers to inject malicious scripts into the system, potential...

pydash command injection vulnerability

pydash is a python library by the individual developer Derrick Gilland. A command injection vulnerability exists in pydash versions prior to 6.0.0, which stems from vulnerability to command injection attacks...

CVE-2023-43314

UNSUPPORTED WHEN ASSIGNED The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00ABNK.2b11C0 could allow an unauthenticated attacker to cause a denial of service condition via a crafted uid...

PT-2023-28830 · Unknown · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: Resort Reservation System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage room function...

PYSEC-2023-178

plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the ++api++ traverser is accidentally used multiple times in a url, handling it takes increasingly longer, making the server less...

CVE-2023-43374

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the idutentelog parameter at /hoteldruid/personalizza.php...

iCMS Cross-Site Request Forgery Vulnerability

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in iCMS version v.7.0.16. A remote attacker can exploit this vulnerability to execute arbitrary code via the user.admincp.php, members.admincp.php, and...

JerryScript Security Vulnerability

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0 that originates from allowing remote attackers to execute arbitrary code via the ecmastringbuilderappendraw component in...

ISL ARP Guard Cross-Site Scripting Vulnerability

ISL ARP Guard is a zero-trust web access solution from ISL Germany. A security vulnerability exists in ISL ARP Guard version v4.0.2, which originated from a vulnerability that allows an attacker to execute arbitrary web script or HTML via the urlstr URL parameter with a crafted payload...

UBUNTU-CVE-2023-36250

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...

Malicious code in chain-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c6ddc619ecf45531efce44ef718865eb6f689b196a3ea770934897790c4b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A security vulnerability exists in FRRouting FRR version 9.0 and prior versions, which stems from a failure to check the availability of two bytes during AIGP validation...

Fundraising Script 安全漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which stems from a user enumeration vulnerability when resetting a password...

WordPress plugin DevBuddy Twitter Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Geomatika IsiGeo Web 命令注入漏洞

Geomatika IsiGeo Web is Geomatika's geographic information system GIS software for the collection, management, analysis, and visualization of geospatial data. A security vulnerability exists in Geomatika IsiGeo Web version 6.0 that originates from allowing remote authenticated users to execute...