CVE-2024-43917

CVE-2024-43917 Une preuve de concept développée pour exploiter CVE-2024-43917. Basée sur l'article de PatchStack. Utilisation usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY...

EUVD-2026-42093

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, ShareSecretManage uses a hardcoded default share link signature key, allowing an attacker who can obtain a passwordless share for a resource and user to use the known key link-pwd-fit2cloud to forge linkToken JWTs,...

WordPress TI WooCommerce Wishlist SQL Injection (CVE-2024-43917)

The TI WooCommerce Wishlist plugin use auxiliary/scanner/http/wp/tiwoocommercewishlistsqli msf undefinedtiwoocommercewishlistsqli show actions ...actions... msf undefinedtiwoocommercewishlistsqli set ACTION msf undefinedtiwoocommercewishlistsqli show options ...show and set options... msf...