PT-2024-23948 · Unknown · Easy Social Share Buttons

Name of the Vulnerable Software and Affected Versions: Easy Social Share Buttons versions n/a through 9.4 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. This means that an...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

PT-2024-26288 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. This component is vulnerable due to the presence of certain parameters, including mudi, dataType, fieldName,...

GHSA-H6R4-XVW6-JC5H NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue

Summary A stored cross-site scripting vulnerability exists within the Formula virtual cell comments functionality. Details The nc-gui/components/virtual-cell/Formula.vue displays a v-html tag with the value of "urls" whose contents are processed by the function replaceUrlsWithLink. This function...

WordPress Fast Custom Social Share by CodeBard plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Fast Custom Social Share by CodeBard versions = 1.1.2...

Share This Image < 1.99 - Open Redirect

Description The plugin is vulnerable to Open Redirect due to insufficient validation on a redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action...

CVE-2023-34283

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283 NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283 NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-34283

CVE-2023-34283 — NETGEAR RAX30 USB Share Link Information Disclosure : The issue arises from how the router handles symbolic links on removable USB media. By creating a symbolic link, a physically present attacker can abuse the router’s web server to access arbitrary local files, revealing sensit...

CVE-2024-33930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

CVE-2024-33930

CVE-2024-33930 is a URL Open Redirect in the Share This Image WordPress plugin. The vulnerability affects Share This Image versions up to 1.97 (per the CVE entry) and is classified as an Open Redirect with network attack vector and user interaction required. Red Hat and Wordfence references in co...

CVE-2024-33930 WordPress Share This Image plugin <= 1.97 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

WordPress Share This Image plugin <= 1.98 - Open Redirection vulnerability

Open Redirection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Share This Image versions = 1.98...

WordPress Social Share Buttons by Supsystic plugin <= 2.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Social Share Buttons by Supsystic versions = 2.2.9...

WordPress Share This Image Plugin <= 1.98 is vulnerable to Open Redirection

Software Share This Image Type Plugin Vulnerable versions = 1.98 Fixed in 1.99 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-33930 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 8ff8b7f51b08 Credits stealthcopter Required privilege Unauthenticate...

WordPress Social Share Buttons by Supsystic Plugin <= 2.2.9 is vulnerable to Broken Access Control

Software Social Share Buttons by Supsystic Type Plugin Vulnerable versions = 2.2.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-47330 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 619b2c170607 Credits Abdi...

WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Social Share Icons & Social Share Buttons versions = 3.6.1...