4708 matches found
PT-2024-24230
Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap affected versions not specified Description An issue in Ecommerce-CodeIgniter-Bootstrap allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component. This...
WordPress plugin Save as PDF Plugin by Pdfcrowd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-22403 · WordPress · Wpc Composite Products
Name of the Vulnerable Software and Affected Versions: WPC Composite Products for WooCommerce plugin for WordPress versions up to, and including, 7.2.7 Description: The issue arises from insufficient input sanitization and output escaping, along with missing authorization on the ajax save...
WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability
Broken Access Control to Stored XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Save as PDF versions = 3.2.0...
CVE-2024-4114
A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...
JADX file override vulnerability
Summary when jadx parses a resource file, there is an escape problem with the style file, which can overwrite other files in the directory when saving the decompile result. Although I don't think this vulnerability realizes path traversal in the true sense of the word , I reported it anyway Detai...
CVE-2024-22856
A SQL injection vulnerability via the Save Favorite Search function in Axefinance Axe Credit Portal = v.3.0 allows authenticated attackers to execute unintended queries and disclose sensitive information from DB tables via crafted requests...
CVE-2024-22856
The CVE-2024-22856 issue affects Axefinance Axe Credit Portal (>= v3.0). Multiple sources confirm a SQL injection vulnerability originating from the Save Favorite Search feature, allowing authenticated attackers to execute unintended queries and expose data from database tables through crafted...
PT-2024-19588 · Unknown · Axe Credit Portal
Name of the Vulnerable Software and Affected Versions: Axe Credit Portal versions 3.0 and later Description: The issue allows authenticated attackers to execute unintended queries and disclose sensitive information from database tables via crafted requests, specifically through the Save Favorite...
CVE-2024-29959
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save...
CVE-2024-29959 Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save...
Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node support save (CVE-2024-29959).
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save...
cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav (CVE-2024-29956)
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the SANnav password in clear text in support save logs when a user schedules a switch "supportsave" Brocade SANnav...
PT-2024-3186 · Brocade · Brocade Sannav
Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: The issue is related to the disclosure of information through registration files in the Standby Node Support Save component of Brocade SANnav software for...
PT-2024-3227 · Tenda · Tenda Tx9
Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue has been found in the function sub 42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to a stack-based buffer overflow. This issue can be exploited...
CVE-2024-24486
An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEPDATA command...
CVE-2024-24486
An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEPDATA command...
CVE-2024-24486
An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEPDATA command...
CVE-2024-24486
CVE-2024-24486 affects silex Technology DS-600 Firmware v1.4.1. The vulnerability allows a remote attacker to edit device settings through the SAVE EEP_DATA command. CVSSv3.1 metrics indicate a network-based, high-impact issue (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H; base score 9.1). Connected sourc...
Silex Technology DS-600 安全漏洞
The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...