Güvenlik Açıkları arşivleri

STARFACE 7.3.0.10 – Authentication with Password Hash Possible Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[webapps] Barebones CMS v2.0.2 – Stored Cross-Site Scripting (XSS) (Authenticated)

Barebones CMS v2.0.2 – Stored Cross-Site Scripting (XSS) (Authenticated) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[webapps] Enrollment System Project v1.0 – SQL Injection Authentication Bypass (SQLI)

Enrollment System Project v1.0 – SQL Injection Authentication Bypass (SQLI) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[webapps] Total CMS 1.7.4 – Remote Code Execution (RCE)

Total CMS 1.7.4 – Remote Code Execution (RCE) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[webapps] File Manager Advanced Shortcode 2.3.2 – Unauthenticated Remote Code Execution (RCE)

File Manager Advanced Shortcode 2.3.2 – Unauthenticated Remote Code Execution (RCE) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

CVE-2023-2298

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘business_id’ parameter in versions…

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized medication of data via the /wp-json/vcita-wordpress/v1/actions/auth REST-API endpoint…

CVE-2023-2300

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ’email’ parameter in versions up to, and including,…

CVE-2023-2301

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.9.1. This is due…

CVE-2023-2302

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ’email’ parameter in versions up…