CVE-2024-8458

The CVE-2024-8458 entry concerns PLANET Technology switch models whose web interface is vulnerable to Cross-Site Request Forgery (CSRF). Affected component: the web application on certain PLANET switch devices. Root cause: CSRF in the web front end allows an unauthenticated remote attacker to tri...

PLANET switch devices 跨站请求伪造漏洞

PLANET switch devices are a series of switch devices from PLANET Corporation in China. The PLANET switch devices suffer from a cross-site request forgery vulnerability, which arises from the vulnerability of a web application to a cross-site request forgery attack, where an attacker can trick a...

SUSE CVE-2024-23271

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior...

Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9006 Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

CVE-2024-3373

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373 SQLi in RSM Design's Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373 SQLi in RSM Design's Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RSM Design Website Template allows SQL Injection. This issue affects Website Template: before 1.2...

CVE-2024-3373

CVE-2024-3373 affects RSM Design Website Template prior to version 1.2. The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands, leading to potential unauthorized data access or modification as described across multiple sources. Exploitation details are...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

Simple College Website 1.0 Shell Upload

============================================================================================================================================= | Title : Simple College Website 1.0 code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0...

RSM Design Website Template SQL注入漏洞

RSM Design Website Template is a website template from RSM Design. A SQL injection vulnerability exists in RSM Design Website Template prior to version 1.2, which stems from the inclusion of a SQL injection vulnerability...

PT-2024-25459 · Unknown · Rsm Design Website Template

Name of the Vulnerable Software and Affected Versions: RSM Design Website Template versions prior to 1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to execute malicious querie...

CVE-2024-46331

ModStartCMS v8.8.0 is affected by an open redirect vulnerability in the redirect parameter at /admin/login. The issue can redirect users to an arbitrary URL. Affected software: ModStartCMS 8.8.0. Root cause: open redirection via the redirect parameter. Impact: potential credential/phishing or use...

Simbarashe Financial Services 2.9.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Simbarashe Financial Services v2.9.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bit...

CVE-2024-44187

A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2024-23271

A flaw was found in WebKit. This flaw allows a remote attacker to trigger unexpected cross-origin behavior via a malicious website. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of...

CVE-2024-8514

The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisnaimport' parameter. This makes it possible for authenticated attackers, with Administrator-level...