11782 matches found
PT-2024-15688 · WordPress · Content Views – Post Grid
Name of the Vulnerable Software and Affected Versions: Content Views – Post Grid, Slider, Accordion Gutenberg Blocks and Shortcode plugin for WordPress versions up to, and including, 3.6.2 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient inpu...
PT-2024-3924
Name of the Vulnerable Software and Affected Versions: libexpat versions through 2.5.0 Description: The issue is related to the incorrect limitation of recursive references to objects in DTD, which can lead to a denial of service. This is caused by recursive XML Entity Expansion if XML DTD is...
PT-2024-10741 · Unknown · Mpedraza2020 Intranet Del Monterroso
Name of the Vulnerable Software and Affected Versions: mpedraza2020 Intranet del Monterroso versions up to 4.50.0 Description: A critical issue was found in the file config/cargos.php, where the manipulation of the dni profe argument leads to sql injection. The estimated number of potentially...
PT-2024-15943 · WordPress · Calculated Fields Form
Name of the Vulnerable Software and Affected Versions: Calculated Fields Form plugin for WordPress versions up to, and including, 1.2.52 Description: The issue is related to Stored Cross-Site Scripting via the plugin's CP CALCULATED FIELDS shortcode due to insufficient input sanitization and outp...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: k9s, buildkitd, skaffold, pulumi, kubeflow-katib, falcoctl-fips, eksctl, dagger, guac, ctop, cri-tools, docker-machine-driver-harvester, helm, argo-workflows, k8sgpt, loki, newrelic-infrastructure-agent, flux-image-reflector-controller, slsa-verifier,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: k9s, buildkitd, skaffold, pulumi, kubeflow-katib, falcoctl-fips, eksctl, dagger, guac, ctop, cri-tools, docker-machine-driver-harvester, helm, argo-workflows, k8sgpt, loki, newrelic-infrastructure-agent, flux-image-reflector-controller, slsa-verifier,...
CVE-2023-52195
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Posts to Page Kerry James allows Stored XSS.This issue affects Kerry James: from n/a through 1.7...
PT-2024-15197 · WordPress · Advanced Iframe
Name of the Vulnerable Software and Affected Versions: Advanced iFrame plugin for WordPress versions up to, and including, 2023.10 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'advanced iframe' shortcode due to insufficient input sanitization and output escapi...
CVE-2024-22297
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap allows Stored XSS.This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.11...
PT-2024-19227 · Cozmoslabs · Cozmoslabs Profile Builder
Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder Pro versions 3.10.0 and earlier Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application...
PT-2024-19312 · Unknown · Marco Milesi Browser Theme Color
Name of the Vulnerable Software and Affected Versions: Marco Milesi Browser Theme Color versions n/a through 1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2024-16217 · Openbi · Openbi
Name of the Vulnerable Software and Affected Versions: openBI versions up to 1.0.8 Description: A critical issue affects the uploadIcon function of the file /application/index/controller/Screen.php in the Icon Handler component, leading to unrestricted upload. The attack can be initiated remotely...
Persistence – Disk Clean-up
Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...
Persistence – Disk Clean-up
Disk Clean-up is a utility which is part of Windows operating systems and can free up hard drive disk space by deleting mainly cache and… Continue reading - Persistence - Disk Clean-up...
CVE-2024-0938
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/deletewebmail.php. The manipulation of the argument WEBBODYIDSTR leads to sql injection. The exploit has been disclosed to the public and may be...
PT-2024-15927 · Unknown · 60Indexpage
Name of the Vulnerable Software and Affected Versions: 60IndexPage versions up to 1.8.5 Description: A critical vulnerability was found in the Parameter Handler component of the file /apply/index.php. The manipulation of the url argument leads to server-side request forgery. This issue can be...
WPvivid < 0.9.95 - Missing Authorization
Description The plugin vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function, making it possible for unauthenticated attackers to invoke these functions and obtain full file paths if they have access to a back-up ID...
MAL-2024-638 Malicious code in wlwz-2312-5200 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aa0da4d15422aa4bd5114985f643d931d8d89ae24a789070a00b3c6f5af31ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-6697
The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the map id parameter in all versions up to, and including, 9.0.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...