Push Notification for Post and BuddyPress <= 1.93 - SQL Injection

Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

IBAX - SQL Injection

IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute...

WordPress AnyComment <0.3.5 - Open Redirect

WordPress AnyComment plugin before 0.3.5 contains an open redirect vulnerability via an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated. An attacker can redirect a user to a malicious site and possibly obtain sensitive information...

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content. id: CVE-2022-42096 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

GamiPress <= 2.8.9 - SQL Injection

GamiPress WordPress plugin version 2.8.9 and below suffers from an SQL injection vulnerability due to insufficient sanitization of user input, allowing attackers to execute arbitrary SQL commands. id: CVE-2024-13496 info: name: GamiPress = 2.8.9 - SQL Injection author: ritikchaddha severity: high...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS（WordPress插件） - 教程 CalderaForm 是一个 WordPress 插件，允许通过拖放轻松创建表单。 在最近的一次活动中，我测试了一些门户网站，其中一个恰好使用了这个插件创建的联系表单。 该实例的自定义配置让我发现了一个漏洞：由于其简单、教科书式的性质，我认为这是一个很好的机会，可以向初学者说明一些机制。 仅用于教育目的 - 不要使用这些信息在未经明确授权的情况下测试目标，也不要用于非法目的 - 不要在消化时跳入冷水 - 天热时要像洋葱一样分层穿衣 完整利用：...

CVE-2019-1698

TRAN CONG DANH - SVTT - 导师: LUU VAN LAN - CVE-2019-1698 - 开始日期: 30/07/2024 对比存在漏洞的版本与修复漏洞版本的代码差异： 代码参考 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php 代码参考 2:...

CVE-2014-0472

CVE-2014-0472 使用 root@kitploit: docker-compose up -d 访问 localhost:8083 参考： https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. 一个或多个视图存在，根据用户输入构造 URL（通常是一个查询字符串中的“next”参数，指示操作成功完成后的重定向位置）。 2. 一个或多个模块已知攻击者存在于服务器的 Python 导入路径上，这些模块在导入时会执行带有副作用的代码。 在 tests.py 中 root@kitploit: def...

cve-2020-7247

cve-2020-7247 Título del exploit: OpenSMTPD 6.6.2 - Ejecución Remota de Código. Fecha: 2020-01-29. Autor del exploit: 1F98D. Autor original: Qualys Security Advisory. Sitio web del proveedor: https://www.opensmtpd.org/. Enlace del software:...

bigdecimal-segfault-fix

h1. BigDecimal 段错误修复 Ruby 的 big decimal 库中存在一个段错误缺陷，当用户提供已知的恶意值时可能被触发。如果您想测试应用程序是否安全，请运行 +example.rb+。该脚本应正常退出，不会发生段错误。 该变通方法存在负面副作用。具体来说，它会阻止您使用 BigDecimal 处理大数（超过 255 位数字）或使用科学计数法提供数字（例如，"5E6" 表示 5000000）。如果您需要这些功能，则必须升级到打过补丁的 Ruby。 强烈建议您按照 "Ruby...

DEBIAN-CVE-2026-89571

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctlcmdrpc copies cmd-inlen bytes into inbuf = kvzalloccmd-inlen and passes inbuf and inlen to -fwrpc. The CXL callback cxlctlfwrpc ignores inlen and never checks the...

rConfig 3.9.4 - Cross-Site Scripting

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php id: CVE-2020-12259 info: name: rConfig 3.9.4 - Cross-Site Scripting...

Log4j_Vulnerability_Demo

Log4jVulnerabilityDemo A simple program to demonstrate how Log4j vulnerability can be exploited CVE-2021-44228 Running the Demo : To start the program, simply run the start.sh on UNIX systems or start.bat on Windows. User input will be read and logged to console using the Log4j framework. By...

CVE-2025-50565

CVE-2025-50565 描述 Doubo ERP 1.0 存在一个SQL注入漏洞，由于对用户输入缺乏过滤，攻击者可远程利用。 漏洞类型 SQL注入 攻击类型 远程 影响信息泄露 true 厂商确认 true 发现者 https://www.jump.net.cn 参考 https://www.jump.net.cn https://v12.icu 受影响产品代码库 Doubo ERP 1.0...