Exploit for CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauth...

WordPress Post From Frontend plugin <= 1.0.0 - Post Deletion via CSRF vulnerability

Post Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Post From Frontend versions = 1.0.0...

Malicious code in test-package2345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 376f2c62728c1d9f82712acd63e4377bd525a0faae2b00a7746dd322c8e5379d The OpenSSF Package Analysis project identified 'test-package2345' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Harbor OFweek Online Exhibition 安全漏洞

Harbor OFweek Online Exhibition is an online exhibition program from Harbor China. A security vulnerability exists in Harbor OFweek Online Exhibition version v.1.0.0. A remote attacker can exploit the vulnerability to execute arbitrary code...

WordPress plugin Woocommerce Product Design 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2024-26872 · Engenius · Engenius Enstation5-Ac

Name of the Vulnerable Software and Affected Versions: EnGenius EnStation5-AC A8J-ENS500AC version 1.0.0 Description: The issue allows blind OS command injection via shell metacharacters in the Ping and Speed Test parameters. This can potentially be exploited to execute unauthorized commands on t...

PT-2024-34625 · Shenzhen Interconnection Harbor Network Technology Co. · Ofweek Online Exhibition

Name of the Vulnerable Software and Affected Versions: Shenzhen Interconnection Harbor Network Technology Co., Ltd Ofweek Online Exhibition version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code due to a Cross Site Scripting vulnerability. Recommendations: For...

PT-2024-39628 · WordPress · Get Quote For Woocommerce

Name of the Vulnerable Software and Affected Versions: Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to unauthorized access of Quote data due to a missing capability check on the ct tepfw wp...

PT-2024-39639 · WordPress · Wp Simple Anchors Links

Name of the Vulnerable Software and Affected Versions: WP Simple Anchors Links plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's wpanchor shortcode due to insufficient input sanitization and output escaping ...

PT-2024-34284 · Chetan Khandla · Woocommerce Product Design

Name of the Vulnerable Software and Affected Versions: Chetan Khandla Woocommerce Product Design versions 1.0.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This allows for Path...

WordPress plugin Woocommerce Product Design 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2024-34266 · Unknown · Realty Workstation

Name of the Vulnerable Software and Affected Versions: Realty Workstation versions 1.0.0 through 1.0.45 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation, allowing unauthorized access. Recommendations: For versions...

PT-2024-33012 · Unknown · Newbee-Mall

Name of the Vulnerable Software and Affected Versions: newbee-mall version 1.0.0 Description: The issue allows for Server-Side Request Forgery SSRF via the goodsCoverImg parameter. Recommendations: For version 1.0.0, avoid using the goodsCoverImg parameter until the issue is resolved...

WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Woocommerce Product Design versions = 1.0.0...

CVE-2024-48656

Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

CVE-2024-9591

The Category and Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'categoryimage' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2024-33176 · Unknown · Student Management System

Name of the Vulnerable Software and Affected Versions: student management system in php with source code version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code due to a Cross Site Scripting vulnerability. Recommendations: For version 1.0.0, update the student...

WordPress plugin Category and Taxonomy Meta Fields 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Category...

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software from the individual developer Sk.Amir Hamza, Bangladesh. A security vulnerability exists in Student Management System v1.0.0, which stems from a cross-site scripting vulnerability that allows remote attackers to execute...

PT-2024-33177 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code due to a SQL Injection vulnerability in the hospital management system written in PHP. This could put sensitive data at risk...