6993 matches found
PT-2025-4425 · Unknown · Templatesnext Toolkit
Name of the Vulnerable Software and Affected Versions: TemplatesNext ToolKit versions 3.2.9 and earlier Description: The issue affects TemplatesNext ToolKit, allowing Stored XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious script...
WordPress plugin TemplatesNext ToolKit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...
WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin TemplatesNext ToolKit versions = 3.2.9...
CVE-2024-37438
Cross-Site Request Forgery CSRF vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1...
CVE-2024-37438 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1...
CVE-2024-37438
CVE-2024-37438 affects WordPress plugin Uncanny Toolkit Pro for LearnDash. A Cross-Site Request Forgery (CSRF) vulnerability exists in Uncanny Toolkit Pro for LearnDash versions before 4.1.4.1, enabling unauthorized actions to be performed by authenticated users. The issue is disclosed in multipl...
CVE-2024-37438 WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1...
PT-2025-2483 · Uncanny Owl · Uncanny Toolkit For Learndash
Name of the Vulnerable Software and Affected Versions: Uncanny Toolkit Pro for LearnDash versions prior to 4.1.4.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows unauthorized actions to be performed on behalf of a user. This can lead to various security...
WordPress plugin Uncanny Toolkit Pro for LearnDash 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...
Narayana 安全漏洞
Narayana is an open source transaction toolkit from JBossTM. A security vulnerability exists in Narayana that stems from the LRA Coordinator component causing the application to crash or hang indefinitely, resulting in a denial of service...
PT-2026-20477
Name of the Vulnerable Software and Affected Versions nltk/nltk affected versions not specified Description A critical issue exists in the NLTK downloader component. The unzip iter function within nltk/downloader.py utilizes zipfile.extractall without validating file paths or implementing securit...
CVE-2024-56066
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
CVE-2024-56066
CVE-2024-56066 concerns the WordPress Plugin “Agency Toolkit” with versions 1.0.0 through 1.0.23 affected by a Missing Authorization vulnerability that enables Privilege Escalation. Affected component: Agency Toolkit plugin code path handling authorization. Impact per CVSSv3.1: high confidentiali...
CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
CVE-2024-56066 WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Privilege Escalation.This issue affects Agency Toolkit: from n/a through = 1.0.23...
PT-2024-36700 · Unknown · Inspry Agency Toolkit
Name of the Vulnerable Software and Affected Versions: Inspry Agency Toolkit versions 1.0.0 through 1.0.23 Description: The issue is related to a Missing Authorization vulnerability that allows Privilege Escalation in the Inspry Agency Toolkit. Recommendations: For versions 1.0.0 through 1.0.23,...
WordPress plugin Agency Toolkit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of the rte_raw_cksum_mbuf() function in the vhost library, part of the libraries and drivers for fast packet processing by DPDK, allows a attacker to cause a service failure.
The vulnerability of the rterawcksummbuf function in the vhost library, which is part of the DPDK toolkit for fast packet processing, stems from a failure to properly manage the output beyond the buffer in memory when calculating the checksum. Exploiting this vulnerability could allow an attacker...
Amazon Linux 2 : ruby (ALAS-2024-2706)
The version of ruby installed on the remote host is prior to 2.0.0.648-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2706 advisory. An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a...
