The archive.

CVE-2024-13005 · 1000 Projects Attendance Tracking Management System

1000 Projects Attendance Tracking Management System attendance_action.php sql injection

CVE-2024-13006 · 1000 Projects Human Resource Management System

1000 Projects Human Resource Management System employeeview.php sql injection

CVE-2024-13072 · 1000 Projects Beauty Parlour Management System

1000 Projects Beauty Parlour Management System Customer Detail add-customer-services.php sql injection

azzaroco1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2024-56064 · azzaroco WP SuperBackup

WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 33%CVSS 10.0

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-13008 · code-projects Responsive Hotel Site

code-projects Responsive Hotel Site newsletter.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2024-13035 · code-projects Chat System

code-projects Chat System update_user.php sql injection

EPSS 0.4%CVSS 9.8

cabraviva1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2024-56198 · cabraviva path-sanitizer

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

EPSS 0.7%public exploit CVSS 9.3

Codezips2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-13024 · Codezips Blood Bank Management System

Codezips Blood Bank Management System campaign.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-13007 · Codezips Event Management System

Codezips Event Management System contact.php sql injection

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-11972 · Unknown Hunk Companion

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

EPSS 59%CVSS 9.8

Webmin1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2024-12828 · Webmin Webmin

Webmin CGI Command Injection Remote Code Execution Vulnerability

EPSS 33%CVSS 9.9

PHPGurukul8 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-13085 · PHPGurukul Land Record System

PHPGurukul Land Record System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-13001 · PHPGurukul Small CRM

PHPGurukul Small CRM index.php sql injection

CVE-2024-13084 · PHPGurukul Land Record System

PHPGurukul Land Record System search-property.php sql injection

CVE-2024-13004 · PHPGurukul Complaint Management System

PHPGurukul Complaint Management System category.php sql injection

CVE-2024-13014 · PHPGurukul Maid Hiring Management System

PHPGurukul Maid Hiring Management System search-maid.php sql injection

CVE-2024-12999 · PHPGurukul Small CRM

PHPGurukul Small CRM edit-user.php sql injection

CVE-2024-13000 · PHPGurukul Small CRM

PHPGurukul Small CRM quote-details.php sql injection

CVE-2024-13016 · PHPGurukul Maid Hiring Management System

PHPGurukul Maid Hiring Management System edit-category.php sql injection

EPSS 0.4%CVSS 9.8

Progress Software Corporation2 vulnerabilities on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2024-12108 · Progress Software Corporation WhatsUp Gold

WhatsUp Gold - Public API signing key rotation issue

EPSS 8%CVSS 9.6

CVE-2024-12106 · Progress Software Corporation WhatsUp Gold

WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication

EPSS 9%CVSS 9.4

lm-sys1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2024-10044 · lm-sys lm-sys/fastchat

SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat

EPSS 0.5%public exploit CVSS 9.3

taisan1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-13022 · taisan tarzan-cms

taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-13030 · D-Link DIR-823G

D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control

EPSS 2%CVSS 9.8

Tiki Wiki1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2024-47919 · Tiki Wiki CMS

Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS 2%CVSS 9.8

2100 Technology Electronic1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2024-13061 · 2100 Technology Electronic Official Document Management System

2100 Technology Electronic Official Document Management System - Authentication Bypass

EPSS 1%CVSS 9.8

VibeThemes7 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2024-56040 · VibeThemes VibeBP

WordPress VibeBP plugin <= 1.9.9.4.1 - Unauthenticated Privilege Escalation vulnerability

CVE-2024-56044 · VibeThemes WPLMS

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary User Token Generation vulnerability

CVE-2024-56046 · VibeThemes WPLMS

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 10.0

CVE-2024-56042 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5.3 - Unauthenticated SQL Injection vulnerability

CVE-2024-56043 · VibeThemes WPLMS

WordPress WPLMS plugin <= 1.9.9 - Unauthenticated Privilege Escalation vulnerability

CVE-2024-56045 · VibeThemes WPLMS

WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

EPSS 0.7%CVSS 9.3

CVE-2024-56039 · VibeThemes VibeBP

WordPress VibeBP plugin < 1.9.9.7.7 - Unauthenticated SQL Injection vulnerability

EPSS 0.6%CVSS 9.3

InfotelGLPI1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-56801 · InfotelGLPI tasklists

Tasklists has Blind SQL Injection in /ajax/reorder.php

inspry1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-56066 · inspry Agency Toolkit

WordPress Agency Toolkit plugin <= 1.0.23 - Privilege Escalation vulnerability

mikeleembruggen1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-56071 · mikeleembruggen Simple Dashboard

WordPress Simple Dashboard plugin <= 2.0 - Privilege Escalation vulnerability

SunnyKai1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-56205 · SunnyKai AI Magic

WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Linux2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-56719 · Linux Linux

net: stmmac: fix TSO DMA API usage causing oops

EPSS 0.5%CVSS 10.0

CVE-2024-56718 · Linux Linux

net/smc: protect link down work from execute after lgr freed

Tecnick1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-47926 · Tecnick TCExam

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

TrueWinter1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-56799 · TrueWinter simofa

Simofa Allows Unauthenticated Access to API Routes

EPSS 0.5%CVSS 10.0

ZTE1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2024-22063 · ZTE ZENIC ONE R58

ZTE ZENIC ONE R58 product has a CSV injection vulnerability

EPSS 0.8%CVSS 9.0

sslplugins1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-56220 · sslplugins SSL Wireless SMS Notification

WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability

StellarWP1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-47183 · StellarWP GiveWP

WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability

PressTigers1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-47188 · PressTigers Simple Job Board

WordPress Simple Job Board plugin <= 2.10.5 - Broken Access Control vulnerability