PHP - CVE CyberSecurity Database News (Page 167)

Apr 7, 2023 XSS WordPress Exploit PHP PropertyHive

CVE-2023-29172 - Unauthenticated Reflected XSS in PropertyHive Plugin (<= 1.5.46) – Analysis, Exploit & Mitigation

--- If you’re running a WordPress site relying on the popular PropertyHive plugin to manage properties and listings, take a moment to check your current

Apr 5, 2023 Exploit Cisco PHP Cisco Identity Services Engine Software

CVE-2023-20021 - How Cisco ISE Command Injection Lets You Go Root — A Complete Breakdown

In this in-depth post, we'll break down CVE-2023-20021, a serious security vulnerability that hits Cisco Identity Services Engine (ISE). This

Mar 23, 2023 Exploit Java PHP Vmware

CVE-2023-20861 - New DoS Vulnerability in Spring Framework via SpEL Injection—Explained with Exploit Demo

In early 2023, a new critical security flaw was discovered in the widely-used Spring Framework. This flaw, tracked as CVE-2023-20861, concerns the

Mar 17, 2023 RCE PHP KnpLabs snappy

CVE-2023-28115 - How a Snappy PHP Library Flaw Can Lead to Remote Code Execution

CVE-2023-28115 is a critical vulnerability affecting the Snappy PHP library, a popular tool used for generating thumbnails, snapshots, or PDFs from URLs or

Mar 13, 2023 WordPress Exploit PHP iThemes BackupBuddy

CVE-2022-31474 - Critical Directory Traversal in iThemes BackupBuddy (v8.5.8. - v8.7.4.1) Exploited – How and Why

WordPress is the world’s most popular CMS, and its security plugins are supposed to protect rather than expose. However, in 2022, a severe flaw