10328 matches found
PT-2025-1153
Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary...
Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...
CVE-2025-22806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through = 1.3.8...
CVE-2025-22806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.8...
CVE-2025-22806
CVE-2025-22806 affects Black Widgets For Elementor. Root cause: DOM-Based XSS due to improper input neutralization during web page generation; affected versions n/a–1.3.8. Wordfence indicates the issue has been patched.
CVE-2025-22503
Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...
CVE-2025-22503
CVE-2025-22503 describes a Cross-Site Request Forgery in the WordPress plugin/feature named "Admin debug wordpress – enable debug". Affected versions are listed as up to 1.0.13 (from n/a through 1.0.13). The Wordfence Intelligence entry indicates this vulnerability remains Unpatched for Admin deb...
CVE-2025-22503 WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen app from BG.Studio. A security vulnerability exists in the BG.Studio Color Phone Call Screen App Android24 version that originates from allowing any application to send a crafted call via the...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 21.1.9 and earlier, which stems from a vulnerability that allows any application...
BG.Studio Color Phone Call Screen App 安全漏洞
BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen application from BG.Studio, Inc. A security vulnerability exists in BG.Studio Color Phone Call Screen App version 1.1.2 and earlier, which stems from a vulnerability that allows any application ...
Galaxy studio apps iCall OS17 Color Phone Flash 安全漏洞
Galaxy studio apps iCall OS17 Color Phone Flash is a default dialer application from Galaxy studio apps, Inc. A security vulnerability exists in Galaxy studio apps iCall OS17 Color Phone Flash version 4.3 and earlier, which originates from a crafted intent that can be sent via the...
CVE-2024-56028
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...
CVE-2024-56028 WordPress Lemonade Social Networks Autoposter Pinterest plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...
CVE-2024-56028
CVE-2024-56028 is a Reflected XSS in the Lemonade Social Networks Autoposter Pinterest WordPress plugin. Affected: Lemonade SNA Pinterest edition up to version 2.0 (from n/a through 2.0). Root cause: improper neutralization of input during web page generation. Impact: allows attacker to inject sc...
ABB Cylon Aspect 3.08.03 webServerDeviceLabelUpdate.php Denial of Service Vulnerability
ABB Cylon Aspect version 3.08.03 suffers from an authenticated arbitrary content injection vulnerability in the webServerDeviceLabelUpdate.php script due to a lack of input validation. Authenticated attackers can exploit the deviceLabel POST parameter to write arbitrary content to a fixed file...
CVE-2024-56231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing saaspricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through = 1.2.4...
CVE-2024-56231
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...
CVE-2024-56231 WordPress SaasPricing plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio SaasPricing allows DOM-Based XSS.This issue affects SaasPricing: from n/a through 1.1.4...