WordPress plugin Export All URLs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

AZL-44253 CVE-2023-30086 affecting package openjpeg2 2.3.1-12

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

FICO Origination Manager 跨站脚本漏洞

FICO Origination Manager FICO OM is a comprehensive customer origination platform from FICO USA, Inc. designed to enable both large and small organizations to maximize returns and control costs, and provide strong customer engagement. A security vulnerability exists in FICO Origination Manager...

BEESCMS 跨站请求伪造漏洞

BEESCMS is a PHP and MySQL based, scalable content management system CMS. A security vulnerability exists in version v4 of BEESCMS that stems from the presence of a cross-site request forgery CSRF vulnerability that allows an attacker to delete an administrator account via a crafted request...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0 that originates from a vulnerability that allows an authenticated, remote attacker to execute malicious code in the application via the settings endpoint and the CSTI in the...

PT-2023-11615 · Beescms · Beescms

Name of the Vulnerable Software and Affected Versions: beescms version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to delete the administrator account via a crafted request to "/admin/admin admin.php". This can be exploited by sending a malicious request to the specifi...

PT-2023-16703 · Monicahq · Monicahq

Name of the Vulnerable Software and Affected Versions: MonicaHQ version 4.0.0 Description: The issue allows an authenticated remote attacker to execute malicious code in the application via CSTI in the "settings" endpoint and first name parameter. Recommendations: For MonicaHQ version 4.0.0,...

Clan Scripts 跨站请求伪造漏洞

Clan Scripts is a CMS written for gaming communities and societies. A security vulnerability exists in Bluethrust Clan Scripts v4, which stems from the presence of a cross-site request forgery CSRF vulnerability that allows an attacker to elevate privileges to an arbitrary account via a crafted...

PT-2023-11484 · Unknown · Bluethrust Clan Scripts

Name of the Vulnerable Software and Affected Versions: Bluethrust Clan Scripts version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to escalate privileges to an arbitrary account via a crafted request to "/members/console.php?cID=5". Recommendations: For Bluethrust Clan...

GL.iNet MT3000 操作系统命令注入漏洞

The GL.iNet MT3000 is an AX3000 portable router using the Wi-Fi 6 protocol from China's GL.iNet. An operating system command injection vulnerability exists in the GL.iNet MT3000 version 4.1.0, which stems from the presence of operating system command injection...

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

Textpattern 代码问题漏洞

Textpattern CMS is a Php-based content management system from the Textpattern team. An arbitrary file upload vulnerability exists in Textpattern CMS version v4.8.8. The vulnerability stems from the application's lack of effective validation of uploaded files. An attacker can exploit the...

GajShield Data Security Firewall 安全漏洞

GajShield Data Security Firewall is an enterprise-grade firewall product from GajShield that provides network security solutions to protect organizations from a wide range of cyber threats and attacks, including malware, viruses, spyware, phishing, DDoS attacks, and more. A security vulnerability...

IBM Cloud Pak for Data 代码问题漏洞

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. A server-side request forgery vulnerability exists in IBM Cloud Pak for Data versions 4.0 and 4.5 that stems from the...

Contiki-NG 安全漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG version 4.8 and prior versions, which stems from the Antelope database management system that triggers a difference-one error...

PT-2023-20855 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A Buffer Overflow issue was discovered, allowing an attacker to cause a Denial of Service via the TextOutputDev.cc function. Recommendations: For XPDF version 4.04, at the moment, there is no information about a...

PT-2023-20856 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: An issue in XPDF allows an attacker to cause a denial of service via a crafted pdf file in the object.cc parameter. Recommendations: For XPDF version 4.04, consider avoiding the use of the object.cc parameter...

IBM Cloud Pak for Data 代码问题漏洞

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. An arbitrary file upload vulnerability exists in IBM Cloud Pak for Data version 4.5, 4.6. The vulnerability stems from t...

PT-2023-20814 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A cross-site request forgery CSRF issue allows attackers to edit information for existing people on the site. This means an attacker can trick a user into performing unintended actions on the site...

PT-2023-20817 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A cross-site request forgery CSRF vulnerability allows attackers to change any user's password except for the user that is currently logged in. Recommendations: For ChurchCRM version 4.5.3, consider...