CVE-2021-4347

The function updateshipmentstatusemailstatusfun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary options update. The function allows attackers including those at customer level to update any WordPress option in the database...

CVE-2020-12110

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2018-100086

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:02+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2016-100028

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2009-0086

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:35+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

CVE-2022-3060

Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate content which could cause a victim to make unintended arbitrary requests...

CVE-2024-57078

creationtimestamp| type| source ---|---|--- 2025-02-05 21:32:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113953417707901210 2025-02-05 22:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxu5own2t 2025-02-06 01:50:59+00:00| seen|...

CVE-2024-57085

creationtimestamp| type| source ---|---|--- 2025-02-05 21:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953412401038570 2025-02-05 22:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlycsrxt2c 2025-02-06 01:51:00+00:00| seen|...

GHSA-CXQQ-W3X5-7PH3

creationtimestamp| type| source ---|---|--- 2025-02-05 18:44:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113952756172745897 2025-02-05 19:35:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113952958359120211...

CVE-2024-56133

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jnjorz2f 2025-02-05 18:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952771094465939 2025-02-05 22:08:52+00:00| seen|...

CVE-2024-56132

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jkqn6j2f 2025-02-05 18:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952771043573312 2025-02-05 22:08:50+00:00| seen|...

CVE-2025-20058

creationtimestamp| type| source ---|---|--- 2025-02-05 17:37:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113952492492280372 2025-02-05 18:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6k5in362j...

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

CVE-2024-52583

The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page schedule.html before 17 November 2024 or commit 93dfb83 contains links to Leostop, a site that hosts a malicious injected JavaScript file that occurs when...

CVE-2024-7026

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection. This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The...

CVE-2024-7366

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12927

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/checkfacultylogin.php. The manipulation of the argument facultyemailid leads to sql injection. Th...

CVE-2024-12899

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/courseaction.php. The manipulation of the argument coursecode leads to sql injection. The attack may be initiated...