Lucene search
+L

8448 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•7 views

CVE-2024-22076: Undefined Security Weakness

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface...

9.8CVSS8.8AI score0.01142EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2024/01/23 12:00 a.m.•23 views

January 23, 2024—KB5034204 (OS Builds 22621.3085 and 22631.3085) Preview

None None...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2024/01/19 9:19 p.m.•8 views

print-shop.ir Improper Access Control vulnerability OBB-3838860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
HackRead
HackRead
•added 2024/01/17 10:19 a.m.•21 views

Print on Demand Power: Tech Accessories Driving Shopify Sales

By Uzair Amir The growth of online shopping has opened up opportunities for businesses. One such opportunity is the print on… This is a post from HackRead.com Read the original post: Print on Demand Power: Tech Accessories Driving Shopify Sales...

7.3AI score
SaveExploits0
NVD
NVD
•added 2024/01/16 4:15 p.m.•33 views

CVE-2023-0479

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability...

6.1CVSS6AI score0.00516EPSS
SaveExploits2References1
Prion
Prion
•added 2024/01/16 4:15 p.m.•29 views

Cross site scripting

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability...

5.8CVSS6AI score0.00516EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2024/01/16 3:55 p.m.•92 views

CVE-2023-0479

The CVE-2023-0479 entry affects the WordPress plugin Print Invoice & Delivery Notes for WooCommerce, prior to version 4.7.2. The issue is a reflected XSS vulnerability in an admin note on the WooCommerce orders page, caused by echoing a GET value after a urldecode() cleanup (post-esc_url_raw()), ...

6.1CVSS5.9AI score0.00516EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•10 views

CVE-2023-0479: Improper Neutralization of Input During Web Page Generation

The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability...

6.1CVSS7AI score0.00516EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2024/01/12 4:15 p.m.•19 views

CVE-2024-0460

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.005EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2024/01/12 3:26 p.m.•15 views

arrow:arrow-ipc-file-fuzz: Stack-buffer-overflow in arrow::ArrayPrinter::Print

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6529377667973120 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-file-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•19 views

PT-2024-15577 · Code Projects · Code-Projects Faculty Management System

Name of the Vulnerable Software and Affected Versions: code-projects Faculty Management System version 1.0 Description: A critical issue affects the processing of the file /admin/pages/student-print.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For...

9.8CVSS6.8AI score0.005EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/01/12 12:00 a.m.•19 views

Faculty Management System SQL Injection Vulnerability

Faculty Management System is a code-projects open source faculty management system. code-projects Faculty Management System version 1.0 SQL injection vulnerability , the vulnerability stems from /admin/pages/student-print.php file has a SQL injection vulnerability...

9.8CVSS8.1AI score0.005EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2024/01/11 12:00 a.m.•301 views

PHPJabbers Cinema Booking System 1.0 Cross Site Scripting

Exploit Title: PHPJabbers Cinema Booking System v1.0 - Reflected Cross-Site Scripting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/cinema-booking-system/sectionDemo Version: v1.0...

7.4AI score0.00436EPSS
SaveExploits2
osv_cve
osv_cve
•added 2024/01/03 9:15 a.m.•19 views

CVE-2023-7068

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprintpackinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated...

6.5CVSS5.8AI score0.00383EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/01/03 9:15 a.m.•11 views

CVE-2023-7068

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprintpackinglist action in all versions up to, and including, 4.3.0. This makes it possible for authenticated...

6.5CVSS5.4AI score0.00383EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/03 12:00 a.m.•24 views

WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS6.8AI score0.00383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/03 12:00 a.m.•21 views

PT-2024-15196 · WordPress · Woocommerce Pdf Invoices

Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress versions up to, and including, 4.3.0 Description: The issue is related to unauthorized access of data due to a missing capability check on the...

6.5CVSS6.7AI score0.00383EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•15 views

Ghostscript lp8000_print_page() Heap Buffer Overflow DoS

The vulnerability of the lp8000printpage function in the gdevlp8k.c component of the Ghostscript software suite relates to the execution of operations outside the buffer memory. Exploiting this vulnerability could allow an attacker to compromise data integrity and also cause service failures...

7.1CVSS7.5AI score0.00468EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
•added 2023/12/25 12:00 a.m.•26 views

PT-2024-22: (Unauth Remote Code Execution) in MyQ Print Server

The vulnerability was identified in MyQ Print Server, versions 8.2 patch 43. An Unauthenticated Remote Code Execution vulnerability can be exploited by an attacker to gain elevated privileges on the target server. Vulnerability status: Confirmed by vendor Date of vulnerability detection: 25.12.20...

9.8CVSS7.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/25 12:00 a.m.•16 views

PT-2023-8708 · Unknown · Myq Print Server

Name of the Vulnerable Software and Affected Versions: MyQ Print Server affected versions not specified Description: The issue is related to incorrect code generation management in the MyQ Print Server, allowing a remote attacker to execute arbitrary code. This could potentially expose sensitive...

10CVSS7.7AI score
SaveExploits0References9
Rows per page
Query Builder