982 matches found
Malicious code in where-scream-6-movie-online-frees (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in where-to-watch-shazam-fury-of-the-gods-fullmovies-free-on-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3954 Malicious code in where-to-watch-shazam-fury-of-the-gods-fullmovies-free-on-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3953 Malicious code in where-scream-6-movie-online-frees (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-5577: Improper Control of Filename for Include/Require Statement in PHP Program
The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version = 1.1.1 via the WIWHEADER parameter of the /system/include/includeuser.php file. This makes it possible for unauthenticated attackers to include and execute arbitrary files hosted on external...
PT-2024-36584
Name of the Vulnerable Software and Affected Versions Where I Was, Where I Will Be plugin for WordPress version = 1.1.1 Description The issue allows unauthenticated attackers to include and execute arbitrary files hosted on external servers via the WIW HEADER parameter of the...
CVE-2024-22187
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this...
CVE-2024-22187
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this...
CVE-2024-23315
A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...
CVE-2024-23315
A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...
CVE-2024-22187
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this...
CVE-2024-23315: Improper Access Control
A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...
CVE-2024-22187: Improper Access Control
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this...
PT-2024-5280
Name of the Vulnerable Software and Affected Versions AutomationDirect P3-550E version 1.2.10.9 Description A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality. This vulnerability can be triggered by a specially crafted network packet,...
SQL Injection
doctrine/orm is vulnerable to SQL Injection. The vulnerability is due to statements in the Where-Clause not being wrapped in brackets due to improper handling of case-insensitive checks, which allows an attacker to execute arbitrary SQL statements...
doctrine/orm Regression in Query Parenthesis can have Security Implications
An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check...
GHSA-VJRG-WPM8-RHRW doctrine/orm Regression in Query Parenthesis can have Security Implications
An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check...
PT-2024-40481
Name of the Vulnerable Software and Affected Versions doctrine/orm affected versions not specified Description The issue is related to a problem in the doctrine/orm project where statements in the Where-Clause were not wrapped in brackets due to improper handling of case insensitive checks...
CVE-2024-2752: Improper Neutralization of Input During Web Page Generation
The Where Did You Hear About Us Checkout Field for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via order meta in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...