AZL-35386 CVE-2023-49558 affecting package yasm 1.3.0-17

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection

Software ARI Stream Quiz Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52182 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID c9a4f35de1f1 Credits Rafie Muhammad Patchstack Required...

CVE-2023-46686

A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to use less secure communication protocols. This issue affects: Gallagher Diagnostics Service prior to v1.3.0 distributed in 9.00.1507MR1...

Gallagher Command Centre security breach

Gallagher Command Centre is a centralized control tool for Gallagher access control systems from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre Diagnostics Service prior to version v1.3.0, which stems from a vulnerability that allows a privileged user to...

VulnCheck KEV: CVE-2023-30625

rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default...

GHSA-PR4W-M4RP-GP87 PHPMemcachedAdmin vulnerable to cross-site scripting (XSS) via improper encoding

A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled...

CVE-2023-6026

A Path traversal vulnerability has been reported in elijaa/phpmemcachedadmin affecting version 1.3.0. This vulnerability allows an attacker to delete files stored on the server due to lack of proper verification of user-supplied input...

PHPMemcachedAdmin Cross-Site Scripting Vulnerability

PHPMemcachedAdmin is a graphical standalone administration tool for memcached by Cyrille Mahieux, an individual developer. A cross-site scripting vulnerability exists in PHPMemcachedAdmin version 1.3.0 due to improper encoding of user control entries in the "/pmcadmin/configure.php" parameter...

PHPMemcachedAdmin Path Traversal Vulnerability

PHPMemcachedAdmin is a graphical standalone administration tool for memcached by Cyrille Mahieux, an individual developer. A path traversal vulnerability exists in PHPMemcachedAdmin version 1.3.0, which stems from a lack of proper validation of user-supplied input...

PT-2023-32484 · Unknown · Elijaa/Phpmemcachedadmin

Name of the Vulnerable Software and Affected Versions: elijaa/phpmemcachedadmin version 1.3.0 Description: A Path traversal vulnerability has been reported, allowing an attacker to delete files stored on the server due to lack of proper verification of user-supplied input. Recommendations: For...

PT-2023-32485 · Unknown · Elijaa/Phpmemcachedadmin

Name of the Vulnerable Software and Affected Versions: elijaa/phpmemcachedadmin version 1.3.0 Description: A critical flaw has been identified, specifically related to a stored XSS vulnerability, allowing malicious actors to insert a carefully crafted JavaScript payload. The issue arises from...

CSZ CMS 1.3.0 Shell Upload Vulnerability

Exploit Title: CSZ CMS Version 1.3.0 Remote Command Execution Date: 23/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://www.cszcms.com/ Software Link: https://www.cszcms.com/link/3https://sourceforge.net/projects/cszcms/files/latest/download Version: Version 1.3.0 Tested on:...

PT-2023-32603 · Csz Cms · Csz Cms

Name of the Vulnerable Software and Affected Versions: CSZCMS version 1.3.0 Description: A problematic issue has been found, affecting the Site Settings Page component, specifically the /admin/settings/ part of the file. The manipulation of the Additional Meta Tag argument with the input leads to...

PT-2023-32602 · Csz Cms · Csz Cms

Name of the Vulnerable Software and Affected Versions: CSZCMS version 1.3.0 Description: A critical issue was found in the File Manager Page component, specifically in the viewstemplates file, leading to permission issues. The attack can be launched remotely. The issue has been publicly disclosed...

CSZCMS License Issue Vulnerability

CSZCMS is an open source web application that allows managing all content and settings on a website. An authorization issue vulnerability exists in CSZCMS version 1.3.0, which stems from an unknown function in the file view template in the component File Manager Page, resulting in a permissions...

CSZCMS Cross-Site Scripting Vulnerability

CSZCMS is an open source web application that allows managing all content and settings on a website. A cross-site scripting vulnerability exists in CSZCMS version 1.3.0, which stems from a cross-site scripting XSS vulnerability in the file /admin/settings/ of the component Site Settings Page...

CVE-2023-47810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...

CVE-2023-28749

Cross-Site Request Forgery CSRF vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin = 1.3.0 versions...

CVE-2023-31212

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPforms, Elementor forms: from n/a through...

Malicious code in react-native-transcribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb4e6ce35475e387bd3dc85d83e20eeb1c4cd4ad8f4c8ccc7792928c87ddc18c The OpenSSF Package Analysis project identified 'react-native-transcribe' @ 1.3.0 npm as malicious. It is considered malicious because: - The...