424 matches found
Sam Spade 1.14 SEH Overflow / DLL Injection
Sam Spade version 1.14 SEH overflow exploit that leverages DLL injection. Exploit Title: Sam Spade 1.14 - SEH Overflow via Arbitrary DLL Injection Date: 14.03.2024 Software Link: https://www.majorgeeks.com/files/details/samspade.html Exploit Author: Ahmet Ümit BAYRAM Tested Version: 1.14 Tested o...
FreeBSD : libcaca -- Multiple vulnerabilities (c10b639c-e51c-11ef-9e76-4ccc6adda413)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c10b639c-e51c-11ef-9e76-4ccc6adda413 advisory. Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: Tenable has extracted...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
TYPO3 Potential Open Redirect via Parsing Differences
Problem Applications that use TYPO3\CMS\Core\Http\Uri to parse externally provided URLs e.g., via a query parameter and validate the host of the parsed URL may be vulnerable to open redirect or SSRF attacks if the URL is used after passing the validation checks. Solution Update to TYPO3 versions...
CVE-2024-12802
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN User Principal Name and SAM Security Account Manager account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and...
Malicious code in gft-sam-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e518541b06a8fad0288da6a0e31b730a6044da6a63fdfe2d8a471d90aac7655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11983 Malicious code in gft-sam-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e518541b06a8fad0288da6a0e31b730a6044da6a63fdfe2d8a471d90aac7655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-51935
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...
CVE-2024-51644
Cross-Site Request Forgery CSRF vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through = 1.1.3...
CVE-2024-51632
CVE-2024-51632: SH Slideshow WordPress plugin
CVE-2024-51644
CVE-2024-51644 — WordPress Addressbook plugin CSRF to Stored XSS Affects WordPress Addressbook plugin versions up to and including 1.1.3. The issue arises from a Cross-Site Request Forgery (CSRF) that enables Stored XSS in the Addressbook component. Public references in the connected docs (PT Sec...
CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...
CVE-2024-51935
CVE-2024-51935 is a DOM-based XSS in the WordPress plugin Fast Video and Image Display (
PT-2024-34788 · Unknown · Sam Wilson Addressbook
Name of the Vulnerable Software and Affected Versions: Sam Wilson Addressbook versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.3 and earlier, update to a version that fixes this issue,...
CVE-2024-49670
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...
CVE-2024-49670
CVE-2024-49670 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Client Power Tools Portal (Sam Glover) affecting versions
CVE-2024-49670 WordPress Client Power Tools Portal plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...
CVE-2024-49670 WordPress Client Power Tools Portal plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...
PT-2024-33622 · Unknown · Sam Glover Client Power Tools Portal
Name of the Vulnerable Software and Affected Versions: Sam Glover Client Power Tools Portal versions 1.8.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...
