libcoap 安全漏洞

libcoap is a C implementation of a lightweight application protocol open-sourced by obgm. A security vulnerability exists in libcoap version 4.3.4, which stems from an integer overflow vulnerability in the file coappdu.c. The vulnerability is caused by an integer overflow in the file coappdu...

WordPress PostX plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by CatFather in WordPress Plugin PostX versions = 4.0.1...

PT-2024-10786 · Codoforum · Codoforum

Name of the Vulnerable Software and Affected Versions: Codoforum version 4.9 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the Category name component...

Codoforum 安全漏洞

Codoforum is a PHP and MySQL based forum software. A security vulnerability exists in Codoforum version v4.9, which stems from an arbitrary file upload vulnerability that could allow an attacker to execute arbitrary code by uploading a crafted file...

Codoforum 安全漏洞

Codoforum is a PHP and MySQL based forum software. A security vulnerability exists in Codoforum version v4.9, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload...

WordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Gift Vouchers versions = 4.4.0...

WordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Podlove Podcast Publisher versions = 4.1.0...

CVE-2024-30614

An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope...

Dell Storage Resource Manager 资源管理错误漏洞

Dell Storage Resource Manager is a software for managing storage resources from Dell USA. A resource management error vulnerability exists in Dell Storage Resource Manager version 4.9.0.0 and earlier, which stems from the presence of session fixation and can be exploited by an unauthenticated...

WordPress Plugin Benchmark Email Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Bold Page Builder plugin <= 4.8.8 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by João Pedro Soares de Alcântara in WordPress Plugin Bold Page Builder versions = 4.8.8...

WordPress Premium Addons for Elementor plugin <= 4.10.24 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Premium Addons for Elementor versions = 4.10.24...

WordPress GEO my WordPress plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin GEO my WordPress versions = 4.1...

PT-2024-22325 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions 4.0.0 through 4.13.39 Contao versions 5.0.0 through 5.3.3 Description: The issue allows inject tags in frontend forms if the output is structured in a very specific way. It is possible to inject insert tags via the form...

WordPress Plugin Contact Form by BestWebSoft 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin Contac...

SUSE CVE-2024-26679

In the Linux kernel, the following vulnerability has been resolved: inet: read sk-skfamily once in inetrecverror inetrecverror is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6ADDRFORM socket option and trigger a KCSAN warning...

Apaczka 安全漏洞

Apaczka is a solution for managing a company's transportation process from Apaczka. A security vulnerability exists in Apaczka versions v1 through v4 that stems from allowing information to be collected from saved templates without authentication...

Dreamer CMS 路径遍历漏洞

Dreamer CMS is a dreamer content management system by Junnan Wang, an individual developer in China. A path traversal vulnerability exists in Dreamer CMS 4.1.3.0 and earlier versions, which stems from a path traversal vulnerability in the function ZipUtils.unZipFiles in the file...

SEMCMS 安全漏洞

SEMCMS is a content management system CMS for foreign trade websites that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originated from allowing remote attackers to execute arbitrary code, elevate privileges, and obtain sensitive information via the upload.ph...

DEBIAN-CVE-2024-26679

In the Linux kernel, the following vulnerability has been resolved: inet: read sk-skfamily once in inetrecverror inetrecverror is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6ADDRFORM socket option and trigger a KCSAN warning...