Skip to main content
CVE-2024-10173 Oct 20, 05:15 MEDIUM POC This Month

A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Ddmq
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-10167 Oct 20, 03:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales Management System Codezips
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-10166 Oct 20, 03:15 MEDIUM POC This Month

A vulnerability was found in Codezips Sales Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales Management System Codezips
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-10165 Oct 20, 03:15 MEDIUM POC This Month

A vulnerability was found in Codezips Sales Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales Management System Codezips
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-10159 Oct 20, 00:15 MEDIUM POC This Month

A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Boat Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-10192 Oct 20, 07:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul IFSC Code Finder Project 1.0 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Ifsc Code Finder Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-10191 Oct 20, 06:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Boat Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-10169 Oct 20, 04:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System Fabian
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-10163 Oct 20, 02:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sentiment Based Movie Rating System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-10162 Oct 20, 01:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Boat Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-10161 Oct 20, 01:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Boat Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-10160 Oct 20, 00:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Boat Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-10193 Oct 20, 08:15 MEDIUM POC THREAT This Month

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical.cgi. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Wn530H4 Firmware Wn530Hg4 Firmware Wn572Hg3 Firmware Wavlink
NVD VulDB
CVSS 4.0
5.1
EPSS
15.0%
CVE-2024-10171 Oct 20, 05:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Bank System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.5%
CVE-2024-49631 Oct 20, 08:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Md Abdul Kader Easy Addons for Elementor easy-addons-for-elementor allows Stored XSS.5.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Easy Addons For Elementor Wordpress Plugin Elementor
NVD VulDB
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-49630 Oct 20, 08:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.2.8. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wp Education Wordpress Plugin Hasthemes
NVD VulDB
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-48049 Oct 20, 08:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mighty Plugins Mighty Builder mighty-builder allows Stored XSS.0.2. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Mighty Builder Wordpress Plugin
NVD VulDB
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-47634 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Streamline CartBounty - Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cross Site Request Forgery.2. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Cartbounty Wordpress Plugin
NVD VulDB
CVSS 3.1
5.4
EPSS
0.2%
CVE-2024-49274 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Cross Site Request Forgery.5.7. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Vod Infomaniak Wordpress Plugin
NVD VulDB
CVSS 3.1
5.4
EPSS
0.1%
CVE-2024-49306 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.5.9. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wp Content Copy Protection No Right Click Wordpress Plugin Wp Buy
NVD VulDB
CVSS 3.1
5.3
EPSS
0.2%
CVE-2024-10170 Oct 20, 04:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Hospital Management System Fabian
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-10195 Oct 20, 09:15 MEDIUM This Month

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi 4G Portable Wifi Tr118 Firmware Tecno Mobile
NVD VulDB
CVSS 4.0
5.1
EPSS
0.4%
CVE-2024-49325 Oct 20, 11:15 MEDIUM This Month

Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Photo Gallery Builder Wordpress Plugin
NVD VulDB
CVSS 3.1
4.3
EPSS
0.5%
CVE-2024-49290 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro cooked-pro allows Cross Site Request Forgery.8.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Cooked Boxystudio
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2024-49628 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.5.18. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Most And Least Read Posts Widget Wordpress Plugin
NVD VulDB
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-49627 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Noor Alam WordPress Image SEO wp-image-seo allows Cross Site Request Forgery.1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Wordpress Image Seo Noorsplugin
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-49275 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.69. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Ideapush Wordpress Plugin Northernbeacheswebsites
NVD VulDB
CVSS 3.1
4.3
EPSS
0.2%
CVE-2024-49272 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.3.15. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Social Auto Poster Wordpress Plugin Wpwebinfotech
NVD VulDB
CVSS 3.1
4.3
EPSS
0.2%
CVE-2024-49250 Oct 20, 11:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Table of Contents Plus table-of-contents-plus allows Cross Site Request Forgery. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Table Of Contents Plus Wordpress Plugin Dublue
NVD VulDB
CVSS 3.1
4.3
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy