PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System

Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...

CVE-2023-37386

Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...

WordPress Wallet Up Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Wallet Up Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a4dec02c5f4a Credits Rafie Muhammad Patchstack Required...

CVE-2023-37985

Cross-Site Request Forgery CSRF vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin = 2.4.6 versions...

CVE-2023-35880

Cross-Site Request Forgery CSRF vulnerability in WooCommerce WooCommerce Brands plugin = 1.6.49 versions...

GHSA-G644-9GFX-Q4Q4 vm2 Sandbox Escape vulnerability

In vm2 for versions up to 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. Impact Remote Code Execution, assuming the attacker has arbitrary code execution primitive inside the context of vm2 sandbox. Patches None. Workarounds None. References...

PT-2023-26298 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

CVE-2023-2561

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the galleryremove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with th...

CVE-2023-36522

Cross-Site Request Forgery CSRF vulnerability in WePupil Quiz Expert plugin = 1.5.0 versions...

CVE-2023-23731

Cross-Site Request Forgery CSRF vulnerability in HasTheme WishSuite plugin = 1.3.3 versions...

CVE-2023-23803

Cross-Site Request Forgery CSRF vulnerability in HasThemes JustTables plugin = 1.4.9 versions...

CVE-2023-36691

Cross-Site Request Forgery CSRF vulnerability in Albert Peschar WebwinkelKeur plugin = 3.24 versions...

CVE-2023-28986

Cross-Site Request Forgery CSRF vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin = 2.9.20 versions...

CVE-2023-22673

Cross-Site Request Forgery CSRF vulnerability in MageNet Website Monetization by MageNet plugin = 1.0.29.1 versions...

CVE-2023-23993

Cross-Site Request Forgery CSRF vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin = 11.1.1 versions...

CVE-2023-32000

A Cross-Site Scripting XSS vulnerability found in UniFi Network Version 7.3.83 and earlier allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page...

CVE-2021-4394

The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation on the saveCustomFields function. This makes it possible for unauthenticated attackers to update custom field meta data via ...

PT-2023-11881 · WordPress · Multivendorx

Name of the Vulnerable Software and Affected Versions: MultiVendorX plugin for WordPress versions up to, and including, 3.5.7 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the submit comment function. This allows unauthenticated...

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki 1.39.3 and earlier versions, which stems from a...

Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner

A modular web reconnaissance tool and vulnerability scanner based on Karton https://github.com/CERT-Polska/karton. The Artemis project has been initiated by the KN Cyber science club of Warsaw University of Technology and is currently being maintained by CERT Polska. Artemis is experimental...