CVE-2023-6000-POC

General Details CVE-ID : CVE-2023-6000 CVSS Score : 6.1 Type : Stored XSS Fixed Version : Popup Builder 4.2.3 This vulnerability allows an attacker to exploit a Cross-Site Scripting XSS flaw in the WordPress Popup Builder plugin. The plugin fails to prevent regular visitors from modifying existin...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

CVE-2026-10170-RCE

Visitor Management System 1.0 - SQLi to Remote Code Execution Attack Chain Vulnerability Information Field| Details ---|--- Product| Visitor Management System Vendor| code-projects.org Version| 1.0 Vulnerability Classes| SQL Injection CWE-89 + Unrestricted File Upload CWE-434 CVE ID| Pending CVSS...

CVE-2024-34226

Visitor Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters. Affected compone...

CVE-2023-50132

CVE-2023-50132 Suggested description Sourcecodester School Visitor Log e-book v1.0 is vulnerable to Cross Site Scripting XSS. Additional Information youtube link: https://youtu.be/W7Oen8rs64 Vulnerability Type Cross Site Scripting XSS Vendor of Product https://www.sourcecodester.com/ Affected...

CVE-2023-4357-Chrome-XXE

Tool Introduction The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitor...

WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection

The plugin does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks. id: CVE-2023-0600 info: name: WP Visitor Statistics Real Time Traffic 6.9 - SQL Injection author: r3Y3r53,j4vaovo severity: critical description: | The...

Company Visitor Management System 1.0 - SQL Injection

Company Visitor Management System 1.0 contains a SQL injection vulnerability via the login page in the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id...

CVE-2026-33937

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics Real Time Traffic plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks. id: CVE-2021-247...

CLSA-2026-1792543803 TuxCare security update for @babel/helper-environment-visitor (1 CVE)

TuxCare rebuilt @babel/helper-environment-visitor to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792543802 TuxCare security update for @babel/helper-environment-visitor (1 CVE)

TuxCare rebuilt @babel/helper-environment-visitor to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1792543806 TuxCare security update for @babel/helper-environment-visitor (2 CVEs)

TuxCare rebuilt @babel/helper-environment-visitor to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792543805 TuxCare security update for @babel/helper-environment-visitor (1 CVE)

TuxCare rebuilt @babel/helper-environment-visitor to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CVE-2026-113442

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient...

Malware in availab-le-alb-um-zip-the-visitor-l1n8t-frzacy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview availab-le-alb-um-zip-the-visitor-l1n8t-frzacy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

CLSA-2026-1792292304 TuxCare security update for @babel/helper-builder-binary-assignment-operator-visitor (1 CVE)

TuxCare rebuilt @babel/helper-builder-binary-assignment-operator-visitor to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792292305 TuxCare security update for @babel/helper-builder-binary-assignment-operator-visitor (2 CVEs)

TuxCare rebuilt @babel/helper-builder-binary-assignment-operator-visitor to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792292299 TuxCare security update for @babel/helper-builder-binary-assignment-operator-visitor (1 CVE)

TuxCare rebuilt @babel/helper-builder-binary-assignment-operator-visitor to address 1 CVE. Fixed in 7.21.0-tuxcare.4...