110 matches found
PT-2024-17885 · Unknown · Antabot White-Jotter
Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in Antabot White-Jotter, affecting some unknown processing of the file "/login". The manipulation of the argument username leads to observable response...
Antabot White-Jotter 代码问题漏洞
White-Jotter is a front-end and back-end separation project developed by Antabot individual developers using Vue+Spring Boot, with a full set of development tutorials. A code issue vulnerability exists in Antabot White-Jotter version 0.2.2 and earlier versions. An attacker can exploit this...
White-Jotter 安全漏洞
White-Jotter is a front-end and back-end separation project developed by Antabot individual developer using Vue+Spring Boot, with a full set of development tutorials. A security vulnerability exists in White-Jotter version 0.2.2 and earlier, which stems from an incorrect manipulation of the...
PT-2024-33564 · Unknown · Brandon White Author Discussion
Name of the Vulnerable Software and Affected Versions: Brandon White Author Discussion versions 0.2.2 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an SQL command...
WordPress plugin Author Discussion SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...
ReLaXed 跨站脚本漏洞
ReLaXed is a ReLaXed open source application. PDF documents can be created interactively using HTML. A cross-site scripting vulnerability exists in ReLaXed 0.2.2 and earlier versions, which stems from an unknown feature of the component Pug to PDF Converter that causes cross-site scripting...
CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
PT-2024-28052 · Unknown · Nlohmann/Json +1
Name of the Vulnerable Software and Affected Versions: dd-trace-cpp versions prior to 0.2.2 Description: The issue occurs when the library fails to extract trace context due to malformed unicode. It attempts to log the list of audited headers and their values using the nlohmann JSON library...
WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin reCAPTCHA Jetpack versions = 0.2.2...
WordPress reCAPTCHA Jetpack Plugin <= 0.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software reCAPTCHA Jetpack Type Plugin Vulnerable versions = 0.2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3940 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cb69d1ca95bb Credits Bob Matyas Required...
TurboBoost Commands Injection Vulnerability
TurboBoost Commands is a reactive application development tool. An injection vulnerability exists in TurboBoost Commands prior to 0.1.3 and prior to 0.2.2, which stems from existing security checks that are not robust enough to prevent all code execution...
White-Jotter 代码问题漏洞
White-Jotter is Antabot individual developers of a front-end and back-end separation of the use of Vue + Spring Boot development project , comes with a full set of development tutorials . Antabot White-Jotter v0.2.2 version of a security vulnerability , the vulnerability stems from the existence ...
PT-2023-22344 · Unknown · Antabot White-Jotter
Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter version 0.2.2 Description: The issue allows remote attackers to execute malicious code via the file parameter to the coversUpload function. This enables attackers to upload malicious files, potentially leading to code...
Path traversal
A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 is able to address this issue. The name of...
pastebinit 路径遍历漏洞
pastebinit is a command line tool from Jess Frazelle's personal developer. It is used to send data to pastebin, which allows users to upload snippets of text for public viewing. A path traversal vulnerability exists in pastebinit version 0.2.2 and earlier versions, which stems from an incorrect...
HTTP response splitting in CGI
Ruby gem cgi.rb prior to versions 0.3.5, 0.2.2 and 0.1.0.2 allow HTTP header injection. If a CGI application using the CGI library inserts untrusted input into the HTTP response header, an attacker can exploit it to insert a newline character to split a header, and inject malicious content to...
CVE-2022-36149
tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry...
CVE-2022-36153
tifig v0.2.2 was discovered to contain a segmentation violation via std::vector ::size const at /bits/stlvector.h...