13 matches found
Critical Photon OS Security Update - PHSA-2026-4.0-0993
Updates of 'openssl' packages of Photon OS have been released...
CVE-2026-1947
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9 via the submitnexform function due to missing validation on a user controlled key. This makes it possible for unauthenticated...
CVE-2026-1947
The CVE concerns the NEX-Forms – Ultimate Forms Plugin for WordPress (WordPress plugin, affected up to version 9.1.9). The vulnerability is an Insecure Direct Object Reference in submit_nex_form() caused by missing validation on a user-controlled key, allowing unauthenticated attackers to overwri...
CVE-2026-1947 NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9 via the submitnexform function due to missing validation on a user controlled key. This makes it possible for unauthenticated...
Fedora: Security Advisory (FEDORA-2026-223569b08a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2025-5.0-92-0578
Updates of 'icu' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2025-5.0-91-0533
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Code-Projects Human Resource Management System 代码注入漏洞
Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A code injection vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from a code injection vulnerability in the handler A cross-site...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0033
Updates of 'syslinux' packages of Photon OS have been released...
CVE-2021-45014
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...
PT-2021-24188
Name of the Vulnerable Software and Affected Versions: taocms version 3.0.2 Description: The issue is related to an upload SQL injection vulnerability in the background of taocms. This vulnerability is specifically found in the parameter id within the endpoint "/action=cms&ctrl=update&id=26"...
CVE-2021-45014: Improper Neutralization of Special Elements used in an SQL Command
There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...
