1796 matches found
CVE-2024-4284 Denial of Service in mintplex-labs/anything-llm
A vulnerability in mintplex-labs/anything-llm allows for a denial of service DoS condition through the modification of a user's id attribute to a value of 0. This issue affects the current version of the software, with the latest commit id 57984fa85c31988b2eff429adfc654c46e0c342a. By exploiting...
CVE-2024-4284
CVE-2024-4284 affects mintplex-labs/anything-llm (versions prior to 1.0.0). The vulnerability allows a DoS by changing a user’s id to 0, enabling a manager/admin to render a target account inaccessible and cause uncontrolled resource consumption. Root cause: lack of input validation/sanitization ...
CVE-2024-4284 Denial of Service in mintplex-labs/anything-llm
A vulnerability in mintplex-labs/anything-llm allows for a denial of service DoS condition through the modification of a user's id attribute to a value of 0. This issue affects the current version of the software, with the latest commit id 57984fa85c31988b2eff429adfc654c46e0c342a. By exploiting...
WordPress plugin Viet Nam Affiliate 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-23618 · Unknown · Cloud Based Customer Service Management Platform
Name of the Vulnerable Software and Affected Versions: Cloud based customer service management platform version 1.0.0 Description: The issue allows a local attacker to execute arbitrary code via a crafted payload to the "Login.asp" component. This is related to a SQL Injection vulnerability...
WordPress Last Viewed Posts by WPBeginner plugin <= 1.0.0 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Last Viewed Posts by WPBeginner versions = 1.0.0...
WordPress plugin Easy Restaurant Table Booking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-29086 · WordPress · Easy Restaurant Table Booking
Name of the Vulnerable Software and Affected Versions: Easy Restaurant Table Booking plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation when saving settings. This allows...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version v.1.0.0, which stems from a permissions issue in the /admin/core/newstaff file...
CVE-2024-1666
In lunary-ai/lunary version 1.0.0, an authorization flaw exists that allows unauthorized radar creation. The vulnerability stems from the lack of server-side checks to verify if a user is on a free account during the radar creation process, which is only enforced in the web UI. As a result,...
Lunary 安全漏洞
Lunary is a production toolkit for LLM that is open sourced by lunary. A security vulnerability exists in Lunary version 1.0.0 that stems from an authorization flaw in the application. An attacker exploiting the vulnerability could send a carefully crafted request directly to the server to bypass...
PT-2024-24035 · Tablesome · Tablesome
Name of the Vulnerable Software and Affected Versions: Table & Contact Form 7 Database – Tablesome versions 1.0.0 through 1.0.25 Description: A Cross-Site Request Forgery CSRF issue affects the specified software. This type of issue allows an attacker to perform unintended actions on a web...
CVE-2024-31022
An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component...
CandyCMS 安全漏洞
CandyCMS is a simple PHP CMS open-sourced by Stephen Radford. A security vulnerability exists in CandyCMS version 1.0.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the install.php component...
PT-2024-23728 · Candycms · Candycms
Name of the Vulnerable Software and Affected Versions: CandyCMS version 1.0.0 Description: An issue was discovered in CandyCMS, allowing remote attackers to execute arbitrary code via the install.php component. Recommendations: For CandyCMS version 1.0.0, consider disabling access to the...
Cloudburst Network 安全漏洞
Cloudburst Network is a networking component used in the Cloudburst project. A security vulnerability exists in versions prior to Cloudburst Network 1.0.0.CR1-20240330.101522-15, which stems from a Denial of Service DoS vulnerability in RakNet connection handling...
dectalk-tts 安全漏洞
dectalk-tts is a simple Node package from Justin McBride's personal developer. A security vulnerability exists in dectalk-tts version 1.0.0, which stems from the use of unencrypted HTTP requests that are vulnerable to interception and modification by an attacker...
CVE-2024-31064
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...