CVE-2023-3616 SQLi in Mava Softwares Hotel Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mava Software Hotel Management System allows SQL Injection. This issue affects Hotel Management System: before 2.0...

Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites

A critical security flaw has been disclosed in the WordPress "Abandoned Cart Lite for WooCommerce" plugin that's installed on more than 30,000 websites. "This vulnerability makes it possible for an attacker to gain access to the accounts of users who have abandoned their carts, who are typically...

Tyche Softwares Addresses Authentication Bypass Vulnerability in Abandoned Cart Lite for WooCommerce WordPress Plugin

On May 29, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in Tyche Softwares’s Abandoned Cart Lite for WooCommerce plugin, which is actively installed on more than 30,000 WordPress websites. This...

WordPress Abandoned Cart Lite For WooCommerce 5.14.2 Authentication Bypass

On May 29, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in Tyche Softwares’s Abandoned Cart Lite for WooCommerce plugin, which is actively installed on more than 30,000 WordPress websites. This...

CVE-2022-45367

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...

CVE-2022-45367

CVE-2022-45367: A CSRF vulnerability in the Tyche Softwares Custom Order Numbers for WooCommerce plugin (

CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...

CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...

PT-2023-14655 · Tyche Softwares · Custom Order Numbers For Woocommerce

Name of the Vulnerable Software and Affected Versions: Tyche Softwares Custom Order Numbers for WooCommerce plugin versions = 1.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

CVE-2023-23703

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Arconix Shortcodes plugin = 2.1.7 versions...

CVE-2023-23703 WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Arconix Shortcodes plugin = 2.1.7 versions...

CVE-2023-23703 WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Arconix Shortcodes plugin = 2.1.7 versions...

CVE-2023-23703

CVE-2023-23703 corresponds to a Stored XSS in the WordPress plugin Arconix Shortcodes (vulnerable: 2.1.7 is the recommended remediation. Additional sources classify the issue as low severity with a low likelihood of exploitation, but it remains a real vulnerability for sites still running

aiproteomics (=0.2.1), alpharing (>=1.0.0 <=2.0.0) +25 more potentially affected by CVE-2021-29596 via tensorflow-cpu (>=1.15.0 <=2.1.0)

tensorflow-cpu PYPI version =1.15.0, =1.0.0, =0.0.1, =1.0.0.4, =0.1.0, =0.2.3, =0.0.5, =0.1.2, =1.0.0, =1.8.2, =1.6.1, =1.8.3 - netfl =1.5.0 and more Source cves: CVE-2021-29596 Source advisory: OSV:GHSA-4VRF-FF7V-HPGR...

GHunt - Investigate Google Accounts With Emai

GHunt is an OSINT tool to extract a lot of informations of someone's Google Account email. It can currently extract : Owner's name Last time the profile was edited Google ID If the account is an Hangouts Bot Activated Google services Youtube, Photos, Maps, News360, Hangouts, etc. Possible Youtube...

Mind Wave Softwares 1.2 SQL Injection

Exploit Title : Mind Wave Softwares SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage :http://www.minewave.com/ Google Dork : inurl:/pagedetails.php?mcatg= Tested On : Windows , Kali Linux Date: 2015/11/28 Demo: http://www.iconsolutions.in/pagedetails.php?mcatg=2'...

Active Web Helpdesk 2 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

eWebquiz 8 - Blind SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ?...

Chimera Web Portal System modules.php comment_poster Cross-Site Scripting - Ver2 (CVE-2006-0136)

A cross-site scripting vulnerability has been reported in Phanatic Softwares Chimera Web Portal. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...