517 matches found
WordPress plugin Banner Slider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-33589 · Unknown · Manzurul Haque Banner Slider
Name of the Vulnerable Software and Affected Versions: Manzurul Haque Banner Slider versions through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations...
PT-2024-31089 · Visionos · Visionos
Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 Description: A user may be able to view sensitive user information due to inadequate redaction of sensitive information. This issue was addressed with improved redaction of sensitive information. Recommendations...
Apple visionOS 安全漏洞
Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 2.1, which stems from the fact that users may be able to view sensitive user information...
WordPress Bet WC 2018 Russia Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
Software Bet WC 2018 Russia Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49637 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f4d264180c24 Credits Le Ngoc Anh Required privilege...
CVE-2024-41445
Library MDF mdflib v2.1 is vulnerable to a heap-based buffer overread via a crafted mdf4 file is parsed using the ReadData function...
WordPress plugin Favicon Generator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...
WordPress Viral Signup plugin <= 2.1 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin Viral Signup versions = 2.1...
Spring Cloud Config Server Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Spring Cloud Config Server Directory Traversal', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability whi...
WordPress plugin Viral Signup 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-11697 · WordPress · Login/Registration Attempts Limit
Name of the Vulnerable Software and Affected Versions: LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress versions up to, and including, 2.1 Description: The issue is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login...
Red Hat Enterprise Linux SEoL (2.1.x)
According to its version, Red Hat Enterprise Linux is 2.1.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...
WordPress Elements For Elementor Plugin <= 2.1 is vulnerable to Local File Inclusion
Software Elements For Elementor Type Plugin Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-5348 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 9e9484637a31 Credits stealthcopter Required privilege...
PT-2024-35786 · Unknown · Phpgurukul Zoo Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A critical issue has been identified in the PHPGurukul Zoo Management System, affecting the file /admin/foreigner-bwdates-reports-details.php. The manipulation of the fromdate argument...
Social Pixel <= 2.1 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to:...
WordPress Social Pixel Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
Software Social Pixel Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4005 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f865e3476ddd Credits Bob Matyas Required privilege...
WP Backpack <= 2.1 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to...
PT-2024-25647 · Hcode · Hcode
Name of the Vulnerable Software and Affected Versions: hcode versions 2.1 and earlier Description: A stack-based buffer overflow was found in the putSDN function of mail.c. Recommendations: For hcode versions 2.1 and earlier, at the moment, there is no information about a newer version that...
oFono 安全漏洞
oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono versions prior to 2.1, which stems from a stack overflow error triggered by the decodestatusreport function during SMS decoding...
