1260 matches found
WordPress Request a Quote Form plugin code execution vulnerability
WordPress Request a Quote Form plugin is a plugin for collecting and managing quote requests with support for custom forms and centralized processing for quote requests for products, services or custom orders. A code execution vulnerability exists in the WordPress Request a Quote Form plugin that...
SUSE-SU-2025:02811-1 Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update to version 0.2.7+141: CVE-2025-58266: shlex: Fixed command injection bsc1247193 - Update to version 0.2.7+117: CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing HTTP2 RSTSTREAM frames bsc1210344...
Malicious code in quote-2 (npm)
The package quote-2 was found to contain malicious code...
MAL-2025-31448 Malicious code in quote-2 (npm)
The package quote-2 was found to contain malicious code...
BIT-LIBPHP-2022-31631 PDO::quote() may return unquoted string
In PHP versions 8.0. before 8.0.27, 8.1. before 8.1.15, 8.2. before 8.2.2 when using PDO::quote function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities...
curl: Path Traversal in SFTP QUOTE command leads to Arbitrary File Write and potential RCE
Description Summary libcurl is vulnerable to a path traversal attack when processing SFTP QUOTE commands. The internal function Curlgetpathname in lib/vssh/curlpath.c fails to sanitize user-provided paths for traversal sequences ../. An attacker who can control the SFTP QUOTE commands can leverag...
CVE-2025-8420 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emdformbuilderlitepagenum function. This is due to the plugin not properly validating user input before using it as a function name. This...
CVE-2025-8420
CVE-2025-8420 affects the WordPress plugin “Request a Quote Form”. The vulnerability arises from improper validation of user input used as a function name within the emd_form_builder_lite_pagenum routine, allowing unauthenticated remote code execution on affected servers. Affected versions are re...
PT-2025-32081 · WordPress · Request A Quote Form
Name of the Vulnerable Software and Affected Versions: Request a Quote Form plugin for WordPress versions prior to 2.5.3 Description: The Request a Quote Form plugin for WordPress is susceptible to Remote Code Execution due to improper validation of user input before it is used as a function name...
WordPress plugin Request a Quote Form 安全漏洞
WordPress Request a Quote Form plugin is a plugin for collecting and managing quote requests with support for custom forms and centralized processing for quote requests for products, services or custom orders. A code execution vulnerability exists in the WordPress Request a Quote Form plugin that...
Malicious code in @toptal/picasso-quote (npm)
The package communicates with a domain associated with malicious activity...
CLSA-2025-1752748974 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
CLSA-2025-1752655000 git: Fix of CVE-2025-48384
CVE-2025-48384: config: quote values containing CR character...
FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14493)
FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the failure of the QUOTE Command Handler component to properly validate the length size of input data, no details of the vulnerability are provided at this time...
CVE-2025-5221
A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2025-5221
A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2025-5221 FreeFloat FTP Server QUOTE Command buffer overflow
A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
CVE-2025-5221
The CVE-2025-5221 issue affects FreeFloat FTP Server 1.0.0. The QUOTE Command Handler is missing proper input length validation, leading to a buffer overflow. The vulnerability can be exploited remotely and the exploit has been disclosed publicly. Mitigation guidance in the connected PT-2025-2295...
CVE-2025-5221 FreeFloat FTP Server QUOTE Command buffer overflow
A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
FreeFloat FTP Server 安全漏洞
FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server that stems from the failure of the QUOTE Command Handler component to properly validate the length size of input data, no details of the vulnerability are provided at this time...