aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras pack ...
Continue ReadingMay 12, 2023
File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter.Read More ...
Continue ReadingMay 12, 2023
Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.5792. This was happening because the `repor ...
Continue ReadingMay 12, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin Read More ...
Continue ReadingMay 12, 2023
A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution.Read More ...
Continue ReadingMay 12, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin Read More ...
Continue ReadingMay 12, 2023
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.Read More ...
Continue ReadingMay 12, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SnapOrbital Panorama plugin Read More ...
Continue ReadingMay 12, 2023
Back to Main