Jenkins Plugin Log Command Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

D-Link DIR-822 安全漏洞

DIR-822 is a wireless router from D-Link, a Chinese company. A command injection vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-822+ version V1.0.2, which stems from the SetStaticRouteSettings function failing to correctly filter constructor command special characters,...

PT-2023-8388 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.2 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands via the shell by exploiti...

CVE-2023-50377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AB-WP Simple Counter allows Stored XSS.This issue affects Simple Counter: from n/a through 1.0.2...

PT-2023-18619 · WordPress · Dashicons + Custom Post Types

Name of the Vulnerable Software and Affected Versions: Dashicons + Custom Post Types versions 1.0.2 and earlier Description: The issue is related to Missing Authorization and Cross-Site Request Forgery CSRF vulnerability. This allows for unauthorized actions to be performed. Recommendations: For...

PT-2023-31543 · WordPress · Ab-Wp Simple Counter

Name of the Vulnerable Software and Affected Versions: AB-WP Simple Counter versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

WordPress plugin Simple Counter cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-23148 · Unknown · Foxskav Easy Bet

Name of the Vulnerable Software and Affected Versions: Foxskav Easy Bet versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows attackers to inject malicious SQL code,...

CVE-2023-49176

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeRevolution WP Pocket URLs allows Reflected XSS.This issue affects WP Pocket URLs: from n/a through 1.0.2...

PT-2023-31094 · Coderevolution · Coderevolution Wp Pocket Urls

Name of the Vulnerable Software and Affected Versions: CodeRevolution WP Pocket URLs versions 1.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2023-31300 · Unknown · Wrc-X3000Gs

Name of the Vulnerable Software and Affected Versions: WRC-X3000GSN version 1.0.2 WRC-X3000GS versions 1.0.24 and earlier WRC-X3000GSA versions 1.0.24 and earlier Description: The issue allows a network-adjacent attacker with administrative privilege to execute an arbitrary OS command by sending ...

CVE-2023-48205

Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails...

Malicious code in yetibarbar_plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c26573e1e915f00ad980599539d1a9a04737c0264c7a7366cf0b7a88a92df08 The OpenSSF Package Analysis project identified 'yetibarbarplug' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in discord.js-song (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90ad9bfacffe2ec987335c33f6ec3024291b2cc98ae356cbc0f16a4051ec79b9 The OpenSSF Package Analysis project identified 'discord.js-song' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Jorani Security Breach

Jorani is a leave management system developed by Benjamin BALET, an individual developer in France. It is designed to provide small organizations with a simple workflow for leave and overtime requests. A security vulnerability exists in Jorani version 1.0.2, which stems from the presence of a hos...

PT-2023-23252 · Baidu · Baidu Tongji Generator

Name of the Vulnerable Software and Affected Versions: Baidu Tongji generator versions n/a through 1.0.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Haoqisir Baidu Tongji generator. Recommendations: For versions n/a through 1.0.2, as a...

CVE-2023-32592

Cross-Site Request Forgery CSRF vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin = 1.0.2 versions...

Malicious code in vanillajs-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19dd1596da1181577937a6d843a7fe1b41a9bb73029d7ecbd4c33e406ad73062 The OpenSSF Package Analysis project identified 'vanillajs-test' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CVE-2023-45827 Prototype Pollution vulnerability in @clickbar/dot-diver

Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the setByPath function which can leads to remote code...

CVE-2023-44025

SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component...