EUVD-2024-41402

Malicious code in bioql PyPI...

CVE-2024-28890

The Forminator WordPress plugin (prior to version 1.29.0 ) is vulnerable to an unrestricted upload of files with dangerous types . Exploitation could allow a remote attacker to obtain sensitive server information, modify the site's content, or trigger a denial-of-service (DoS) condition. This vul...

CVE-2024-28890: Unrestricted Upload of File with Dangerous Type

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service DoS...

Cisco Prime Collaboration Disclosure Sensitive Information

The vulnerability in the Cisco Prime Collaboration Deployment software’s web interface exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information, alter the appearance of the website, and perfor...

CVE-2023-28408

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website or cause a denial-of-service DoS condition, and obtain sensitive information depending on settings...

CVE-2021-20784

HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product...

Heap overflow

HTTP header injection vulnerability in Everything all versions except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product via unspecified vectors...