GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild ...
Continue Reading
June 12, 2023
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2Read More ...
Continue Reading
June 12, 2023
A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?ap ...
Continue Reading
June 12, 2023
A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of ...
Continue Reading
June 12, 2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPoperation SALERT â Fake Sales Notification WooCommerce plugin Read More ...
Continue Reading
June 12, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin Read More ...
Continue Reading
June 12, 2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin Read More ...
Continue Reading
June 12, 2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin Read More ...
Continue Reading
June 12, 2023
Back to Main
