CVE-2023-34240

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong...

Design/Logic Flaw

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong...

CVE-2023-34240 Weak passwords allowed in cloudexplorer-lite

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong...

CVE-2023-34240 Weak passwords allowed in cloudexplorer-lite

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong...

CVE-2023-3423

Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0...

PT-2023-24755 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to 1.2.0 Description: The issue concerns weak password requirements. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue...

PT-2023-11579 · Yiicms · Yiicms

Name of the Vulnerable Software and Affected Versions: YiiCMS versions 1.2.0 and prior YiiCMS version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the news function, which is affected by a Cross Site Scripting vulnerability. Recommendations: For YiiCMS version...

PT-2023-21181 · WordPress · Upload Resume Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Upload Resume WordPress plugin versions 1.2.0 and earlier Description: The issue allows unauthenticated visitors to upload arbitrary media files to the site due to a lack of validation of the captcha parameter when uploading a resume via the...

WordPress Plugin Upload Resume 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2023-2351 WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action

The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'ajaxadmin' function in versions up to, and including, 1.2.3. This makes it possible for authenticated attackers with subscriber-level permissions...

07FLY-CRM 跨站脚本漏洞

07FLY-CRM is a CRM management system from China Zero Takeoff 07FLY. A cross-site scripting vulnerability exists in versions prior to 07FLY-CRM 1.2.0, which stems from unknown code in the User Profile Handler that results in cross-site scripting...

PT-2023-22798 · 07Flycrm · 07Flycrm

Name of the Vulnerable Software and Affected Versions: 07FLY CRM versions up to 1.2.0 Description: A vulnerability was found in the User Profile Handler component, which can be exploited to lead to cross site scripting. The attack can be initiated remotely. Recommendations: For 07FLY CRM versions...

WordPress plugin Novelist 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-24100 · Unknown · Nose Graze Novelist Plugin

Name of the Vulnerable Software and Affected Versions: Nose Graze Novelist plugin versions prior to 1.2.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to inject...

Rekor 安全漏洞

Rekor is open source software that provides an immutable, tamper-proof ledger for metadata generated in the supply chain of software projects. A security vulnerability exists in Rekor versions prior to v1.2.0, which stems from ntoto/v0.0.2 A type error may cause a panic in a thread in the Rekor...

Upload Resume <= 1.2.0 - Captcha Bypass

The plugin does not validate the captcha parameter when uploading a resume via the resumeuploadform shortcode, allowing unauthenticated visitors to upload arbitrary media files to the site. The PoC will be displayed once the issue has been remediated...

Apache InLong 安全漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. An elevation of privilege vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0, which can be exploited by an attacker to elevate privileges...

Apache InLong 安全漏洞

Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. A security bypass vulnerability exists in Apache InLong versions 1.2.0 through 1.6.0. An attacker can exploit the vulnerability to bind any cluster, even if he is not the cluster owner...

PT-2023-16692 · WordPress · The Help Desk Wp

Name of the Vulnerable Software and Affected Versions: The Help Desk WP WordPress plugin version 1.2.0 and earlier Description: The issue is related to the lack of sanitization and escaping of certain parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting...

CVE-2023-31134

The CVE-2023-31134 issue affects Tauri builds where IPC isolation can be bypassed by redirecting an existing window to an external website. This vulnerability exists in specific pre-patch versions: 1.0.0–1.0.9, 1.1.0–1.1.4, and 1.2.0–1.2.5. The attack surface is the IPC layer, granting external s...