8511 matches found
PT-2024-30048 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the categorie.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disablin...
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the addgroup.php component not adequately verifying that a request comes from a trusted...
PT-2024-30047 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version v2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete media.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version v2.0, consider...
PT-2024-30039 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...
Kliqqi CMS 安全漏洞
Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/adminbackup.php?dobackup=files does not adequately verify that the request is from a trusted user , an attacker ca...
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletecategorie.php component not adequately verifying that a request comes from a...
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System version v2.0, which stems from a failure of the categorie.php component to adequately validate whether a reques...
PT-2024-30067 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /admin/admin widgets.php endpoint with specific parameters: action=remove and widget=Statistics. This...
Warehouse Inventory System 安全漏洞
Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletemedia.php component not adequately verifying that a request comes from a trust...
PT-2024-30046 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete product.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...
PT-2024-30043 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider...
PT-2024-30042 · Unknown · Warehouse Inventory System
Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the edit group.php component allows attackers to escalate privileges. Recommendations: For Warehouse Inventory System version 2.0, consider disabli...
WordPress plugin Bit Form Pro 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2024-43309
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram Widget and Join Link: from n/a through 2.1.27...
PT-2024-8682 · Scada-Lts · Scada-Lts
Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8 Description: A vulnerability has been found in the Message Handler component of Scada-LTS, related to the file /Scada-LTS/app.shtm/alarms/Scada. The manipulation leads to cross-site scripting. The attack can be launche...
WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Michael Patchstack Alliance in WordPress Plugin Void Contact Form 7 Widget For Elementor Page Builder versions = 2.4.1...
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
...
UBUNTU-CVE-2024-43370
gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting XSS injection if .po dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this...