MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

CVE-2024-47365

CVE-2024-47365 is a stored XSS vulnerability in the WordPress plugin Automatically Hierarchic Categories in Menu, affecting versions up to 2.0.5. The issue arises from improper input neutralization during web page generation and can lead to stored cross-site scripting. Patch guidance across conne...

CVE-2019-11517

WampServer before 3.1.9 has CSRF in addvhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner...