PT-2024-36229 · Fahad Mahmood · Wp Quick Shop

Name of the Vulnerable Software and Affected Versions: WP Quick Shop versions through 1.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. A Cross-site Scripting XSS vulnerability...

WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin WP Quick Shop versions = 1.3.1...

Synology Router Manager 跨站脚本漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A cross-site scripting vulnerability exists in Synology Router Manager SRM versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the Network Center Polic...

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the Network WOL feature, which is...

WordPress plugin PayTR Taksit Tablosu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-13517 · Paytr Ödeme Ve Elektronik Para Kuruluşu A.Ş. · Paytr Taksit Tablosu

Name of the Vulnerable Software and Affected Versions: PayTR Taksit Tablosu versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit Tablosu. It allows exploiting incorrectly configured acces...

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the DDNS logging feature, which is...

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the router's port forwarding feature, an...

Synology Router Manager 跨站脚本漏洞

Synology Router ManagerSRM is a ChinaSRM etc are all products of China's SynologySynology.Synology Router Manager is a software used to configure and manage Synology routers.WebSockets ws etc are all WebSockets WebSockets ws is a Node.js WebSocket library. tanStack form and others are TanStack op...

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the WiFi Connect setup feature, and is...

Synology Router Manager 路径遍历漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology Inc. A path traversal vulnerability exists in Synology Router Manager SRM versions prior to 1.3.1-9346-9, which stems from improperly restricting path names. An attacker could exploit...

PT-2024-35869 · Unknown · Arca Payment Gateway

Name of the Vulnerable Software and Affected Versions: ArCa Payment Gateway versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

WordPress plugin Out Of Stock Badge 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

PT-2024-40409 · Npm · Smol-Toml

Name of the Vulnerable Software and Affected Versions: smol-toml versions prior to 1.3.1 Description: The issue arises from the library's lack of limitation on the maximum exploration depth while parsing or producing TOML documents, allowing an attacker to cause a stack overflow by sending a...

WordPress plugin Posts Filter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-35016 · Unknown · Browsing History

Name of the Vulnerable Software and Affected Versions: Browsing History versions n/a through 1.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For version...

WordPress plugin RLM Elementor Widgets Pack 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34320 · Unknown · Rlm Elementor Widgets Pack

Name of the Vulnerable Software and Affected Versions: RLM Elementor Widgets Pack versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks...

WordPress plugin Browsing History 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...