CVE-2025-24667

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-24665

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24667 WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-24667

CVE-2025-24667 is a SQL Injection in WordPress Small Package Quotes – Worldwide Express Edition (affected up to version 5.2.17). The CVE entry specifies improper neutralization of SQL commands in Small Package Quotes – Worldwide Express Edition, with an impact described as Confidentiality High an...

CVE-2025-24665 WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24665

CVE-2025-24665 is a SQL Injection in WordPress Small Package Quotes – Unishippers Edition (affected versions up to 2.4.8). Root cause: improper neutralization of SQL elements. Impact: potential unauthorized DB access or data exposure. Remediation: upgrade to a version later than 2.4.8 (patch/miti...

CVE-2025-24664

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2025-24664

CVE-2025-24664 is an SQL Injection vulnerability in the WordPress plugin “LTL Freight Quotes – Worldwide Express Edition” (affected: 5.0.20 and earlier). The issue arises from improper neutralization of user input in SQL commands, enabling SQL injection with a high impact on confidentiality and p...

CVE-2025-24664 WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eniture Technology LTL Freight Quotes – Worldwide Express Edition allows SQL Injection. This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.0.20...

CVE-2025-24664 WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affects LTL Freight Quotes – Worldwide Express Edition:...

CVE-2024-56948

The KuGou Music iOS application (version v20.0.0 ) is vulnerable to an issue that allows attackers to access sensitive user information by supplying a crafted link . This vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of Sensitive Inform...

CVE-2024-56969

An issue in Pixocial Technology Singapore Pte. Ltd BeautyPlus iOS 7.8.010 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56967

An issue in Cloud Whale Interactive Technology LLC. PolyBuzz iOS 2.0.20 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56948

An issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56950

The KuGou Concept music applet for iOS version 4.0.61 , developed by KuGou Technology Co., Ltd, is vulnerable to an issue that allows attackers to access sensitive user information by providing a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and C...

PT-2025-5486 · Enituretechnology · Eniture Technology Small Package Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Unishippers Edition versions 2.4.8 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This enables unauthorize...

CVE-2024-56947

Xiamen Meitu Technology Co., Ltd. BeautyCam for iOS version v12.3.60 is vulnerable to an issue that allows attackers to access sensitive user information by providing a crafted link . The vulnerability is associated with URL Redirection to Untrusted Site (CWE-601) and Insecure Storage of Sensitiv...

CVE-2024-56947

An issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56947

An issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56955

An issue in Tencent QQMail for iOS version 6.6.4 allows attackers to access sensitive user information by supplying a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of Sensitive Information). While some records indicat...