[local] (shellcode) Linux-x64 – create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]
(shellcode) Linux-x64 – create a shell with execve() sending argument using XOR (/bin//sh) [55 bytes]
[webapps] WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – “Dashboard Redirect” field Stored Cross-Site Scripting (XSS)
WordPress Plugin Admin Bar & Dashboard Access Control Version: 1.2.8 – “Dashboard Redirect” field Stored Cross-Site Scripting (XSS)
CVE-2024-0433 | Gestpay for WooCommerce Plugin up to 20221130 on WordPress ajax_unset_default_card cross-site request forgery
A vulnerability classified as problematic was found in Gestpay for WooCommerce Plugin up to 20221130 on WordPress. This vulnerability affects the function ajax_unset_default_card. The manipulation leads to cross-site request forgery.
This vulnerabilit…
CVE-2024-0432 | Gestpay for WooCommerce Plugin up to 20221130 on WordPress ajax_delete_card cross-site request forgery
A vulnerability classified as problematic has been found in Gestpay for WooCommerce Plugin up to 20221130 on WordPress. This affects the function ajax_delete_card. The manipulation leads to cross-site request forgery.
This vulnerability is uniquely id…
CVE-2024-1791 | CodeMirror Blocks Plugin up to 1.2.4 on WordPress cross site scripting
A vulnerability was found in CodeMirror Blocks Plugin up to 1.2.4 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is handled as CV…
CVE-2024-0767 | Envo Elementor Templates & Widgets for WooCommerce Plugin ajax_plugin_activation cross-site request forgery
A vulnerability was found in Envo Elementor Templates & Widgets for WooCommerce Plugin up to 1.4.4 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function ajax_plugin_activation. The manipulation leads to cross…
CVE-2024-1368 | Page Duplicator Plugin up to 0.1.1 on WordPress authorization
A vulnerability was found in Page Duplicator Plugin up to 0.1.1 on WordPress. It has been classified as critical. Affected is an unknown function. The manipulation leads to missing authorization.
This vulnerability is traded as CVE-2024-1368. It is po…