The Official Site Of NAIT (Native AI Teams)

Tag: StoredXss

  • Vulnerability Watch No74

    NewStatPress WordPress Plugin Exposes Admins to Stored XSS • FV Flowplayer Video Player Plugin Vulnerable to Stored XSS • Gmedia Photo Gallery SQL Injection Exposes WordPress Databases • Smart Forms WordPress Plugin Allows Unauthenticated Script Injection • Form Maker by 10Web Exposes Databases to Blind SQL Injection…

    ,

  • Vulnerability Watch No73

    vLLM Loader Flaw Enables Remote Code Execution • AVideo Scheduler Bug Exposes Email Jobs • MemberPress Flaw Allows Administrator Account Takeover • YayPricing Plugin Enables Stored Script Attacks • Zonify Plugin Leaks Authentication Tokens…

    ,

  • Vulnerability Watch No68

    Critical cjose JWE Flaw Exposes Encrypted Data • cjose AES Key Wrap Bug Enables Heap Corruption • Maravel JWT Cache Issue Allows Token Replay • OPNsense NTP Module Bug Allows Root File Writes • n8n Expression Engine Flaw Risks Code Execution…

    ,

  • Vulnerability Watch No63

    Critical TOTOLINK NR1800X Buffer Overflow Exposes Remote Attack Surface • Medicine Delivery Password Recovery Hit by SQL Injection • Product Category Filter in Medicine Delivery App Vulnerable to SQL Injection • AshPhoenix Tenant Authorization Bug Can Bypass Scoped Access Checks • Medicine Delivery Product Detail Page Exposes SQL Injection…

    ,

  • Vulnerability Watch No62

    Magma Integrity Validation Flaw Exposes Remote Attack Surface • ash_postgres Tenant Rename Flaw Can Cross Data Boundaries • Admidio Blind SQL Injection Exposes Credentials • SiYuan Block Metadata Enables Stored Script Execution • SiYuan Stored XSS Targets Package and Notebook Workflows…

    ,

  • Vulnerability Watch No52

    WordPress WPAdverts Authorization Bypass Exposes Site Configuration • COMFAST Router Flaw Enables Remote OS Command Injection • PHPGurukul Complaint System Hit by Remote SQL Injection • SourceCodester Timetabling System Exposes SQL Injection Flaw • Second SourceCodester Timetabling Endpoint Vulnerable to SQL Injection…

    ,

  • Vulnerability Watch No51

    Zephyr Flash Syscall Flaw Enables Kernel Privilege Escalation • Glances Action Templates Can Reconstruct Shell Operators • Malformed Host Header Can Crash WebSocket Servers • Endpoint Privilege Management Tamper Protection Can Be Bypassed • PyCharm Jupyter MCP Tools Expose Unauthenticated Code Execution…

    ,

  • Vulnerability Watch No48

    WordPress Frontend Admin Flaw Enables Administrator Takeover • Royal Elementor Addons SSRF Exposes Internal Services • Podlove File Deletion Flaw Can Lead to Remote Code Execution • ProSolution WP Client Upload Bug Enables Unauthenticated RCE • Autopay WordPress Plugin Allows Unauthenticated Stored XSS…

    ,

  • Vulnerability Watch No46

    Unauthenticated Stored XSS Hits Invisible Anti-Spam WordPress Plugin • Cookie Consent Plugin Exposes WordPress Sites to Stored XSS • MaxUpload Flaw Enables Unauthenticated File Upload and Possible RCE • User Session Synchronizer Bug Allows Full WordPress Account Takeover • Propovoice Manager Accounts Can Escalate to WordPress Administrator…

    ,

  • Vulnerability Watch No44

    Tenda G0 Port Mapping Flaw Enables Remote Buffer Overflow • Tenda G0 Static Route Bug Triggers Remote Stack Overflow • Tenda G0 Port Mirroring Endpoint Hit by Buffer Overflow • Tenda AC1206 Guest Wi-Fi Handler Exposed to Remote Overflow • Tenda AC1206 Device Naming Flaw Enables Remote Buffer Overflow…

    ,