Addify WooCommerce Advanced Free Gifts Plugin Security Vulnerability

Addify WooCommerce Advanced Free Gifts Plugin is an advanced free gifts plugin from Addify. Enables store owners to offer free gifts to their customers. A security vulnerability exists in Addify WooCommerce Advanced Free Gifts Plugin v.1.0.2 and prior versions, which stems from the presence of a...

CVE-2023-46504

Cross Site Scripting XSS vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component...

PT-2023-30062 · Pwncyn · Yxbookcms

Name of the Vulnerable Software and Affected Versions: PwnCYN YXBOOKCMS version 1.0.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the reader management and book input modules. Recommendations: For version 1.0.2, update to a newer version th...

PT-2023-30063 · Unknown · Pwncyn Yxbookcms

Name of the Vulnerable Software and Affected Versions: PwnCYN YXBOOKCMS version 1.0.2 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via the library name function in the general settings component. This can be exploited by a physically proximate attacke...

WordPress plugin FileOrganizer Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An Access Control Error vulnerability exist...

CVE-2023-41031

Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint...

CVE-2023-41029

Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint...

Malicious code in @csmsce/msx-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0fc7c362db232e6c3dff94d78d7360704684a2c76d019283f6f1d3e86b3e6e8 The OpenSSF Package Analysis project identified '@csmsce/msx-types' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in @cosell/accountplan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a11852a87ae441dfe39ecf58cf593108ae7c4caba3814a4b3ab352b91e350c0 The OpenSSF Package Analysis project identified '@cosell/accountplan' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

Malicious code in callhtmcall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03a873d8d4db0e3281e619370cee727f1dd276f0d0bb095bf180589e02d15a78 The OpenSSF Package Analysis project identified 'callhtmcall' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Juplink RX4-1500 Trust Management Issue Vulnerability

The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...

PT-2023-25647 · WordPress · Fileorganizer

Name of the Vulnerable Software and Affected Versions: FileOrganizer WordPress plugin versions 1.0.2 and earlier Description: The issue allows site admins to gain full control over the server in multisite instances due to a lack of functionality restriction. This can potentially lead to attackers...

CVE-2023-32595

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin = 1.0.2 versions...

WordPress plugin Sunny Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-23899 · Palasthotel · Sunny Search

Name of the Vulnerable Software and Affected Versions: Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin versions 1.0.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges...

CVE-2023-41028

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...

Woodpecker 输入验证错误漏洞

Woodpecker is a community branch of the Drone CI system. An input validation error vulnerability exists in Woodpecker versions 1.0.0 through 1.0.2, which can be exploited by an attacker to publish incorrectly formatted Webhook data, resulting in repository data updates...

Invalid Slice Split Results in Server Panic

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients. Impact An attacker with knowledge of this vulnerability could craft and...

odoh-rs security vulnerability

odoh-rs is a Cloudflare open source library that implements the RFC 9230 Oblivious DNS over HTTPS protocol in Rust. A security vulnerability exists in versions prior to odoh-rs rust crate 1.0.2, which stems from faulty logic during the parsing of encrypted queries, and which can be exploited by a...

Malicious code in scoot-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6be6ba14862d23e6f280567f9f5a3405b29138d36e7ba2b347ec7a02a1f34d77 The OpenSSF Package Analysis project identified 'scoot-tracking' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...