Kashipara Bus Ticket Reservation System 安全漏洞

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site scripting vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in /adminschedule.php, and can be...

PT-2024-30133 · Unknown · Kashipara Bus Ticket Reservation System

Name of the Vulnerable Software and Affected Versions: Kashipara Bus Ticket Reservation System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/schedule.php" page, which allows remote attackers to execute arbitrary code via the bookingdate parameter. This...

Kashipara Bus Ticket Reservation System 安全漏洞

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site scripting vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the bookingdate parameter of...

nom.kr Cross Site Scripting vulnerability OBB-3953326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-39630

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13...

CVE-2024-39630 WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13...

CVE-2024-39630

CVE-2024-39630 describes a Deserialization of Untrusted Data vulnerability in the MotoPress Timetable and Event Schedule plugin for WordPress (Timetable and Event Schedule, affected versions 2.4.13 and earlier). The root cause is PHP object injection via untrusted data deserialization. Red Hat an...

WordPress plugin Timetable and Event Schedule 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

WordPress Timetable and Event Schedule by MotoPress plugin <= 2.4.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VNPT Nguyễn Phương Bắc Patchstack Alliance in WordPress Plugin Timetable and Event Schedule versions = 2.4.13...

WordPress Timetable and Event Schedule Plugin <= 2.4.13 is vulnerable to PHP Object Injection

Software Timetable and Event Schedule Type Plugin Vulnerable versions = 2.4.13 Fixed in 2.4.14 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-39630 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 6ee205917cb2 Credits !\VNPT\ Nguyễn Phương...

Malicious code in 3months-staff_schedule (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6268 Malicious code in 3months-staff-schedule (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 3months-staff-schedule (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-38544

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxecompqueuepkt In rxecompqueuepkt an incoming response packet skb is enqueued to the resppkts queue and then a decision is made whether to run the completer task inline or schedule it. Finally the skb ...

MAL-2024-1611 Malicious code in employee-schedule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab The OpenSSF Package Analysis project identified 'employee-schedule' @ 99.9.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in employee-schedule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab The OpenSSF Package Analysis project identified 'employee-schedule' @ 99.9.2 npm as malicious. It is considered malicious because: - The package...

CVE-2024-6006

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to cross site scripting. The attack may be launch...

CVE-2024-6006

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to cross site scripting. The attack may be launch...

CVE-2024-6006

CVE-2024-6006 affects ZKTeco ZKBio CVSecurity V5000 4.1.0, specifically the Summer Schedule Handler’s Schedule Name argument. Exploitation allows cross-site scripting and may be triggered remotely; the exploit has been disclosed. The vendor notes ZKBio Security V5000 was withdrawn and recommends ...

CVE-2024-6006 ZKTeco ZKBio CVSecurity V5000 Summer Schedule cross site scripting

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to cross site scripting. The attack may be launch...