CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690

The CVE-2022-1690 issue affects the WordPress plugin Note Press (versions up to 0.1.10). The underlying vulnerability is an SQL injection in admin bulk actions caused by failing to sanitize/escape IDs before embedding them in a SQL statement. Impact described across multiple sources indicates an ...

CVE-2022-1689 Note Press <= 0.1.10 - Admin+ SQLi via Update

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection...

CVE-2022-1689

The CVE-2022-1689 entry concerns the WordPress Note Press plugin (versions

CVE-2022-1688

The Note Press WordPress plugin (versions

CVE-2022-1688 Note Press <= 0.1.10 - Admin+ SQLi via id

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections...

PT-2022-14048

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue is related to an SQL injection problem. The Note Press WordPress plugin does not properly sanitise and escape the ids from the bulk actions before using them in ...

PT-2022-14047

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue arises from the lack of sanitization and escaping of the Update parameter in SQL statements when updating notes via the admin dashboard, leading to an SQL...

PT-2022-14046

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue concerns a lack of sanitization and escaping of the id parameter, which is used in SQL statements via the admin dashboard. This leads to SQL injections...

CVE-2022-1690: Improper Neutralization of Special Elements used in an SQL Command

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1689: Improper Neutralization of Special Elements used in an SQL Command

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection...

CVE-2022-1688: Improper Neutralization of Special Elements used in an SQL Command

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections...

AZL-9890 CVE-2022-27781 affecting package curl for versions less than 7.83.1-1

libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation...

Ransomware-Simulator - Ransomware Simulator Written In Golang

The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware behaviour, such as: Staging from a Word document macro Deleting Volume Shadow Copies Encrypting documents embedded and dropped by the simulator into...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

Google Releases Security Updates for Chrome

Google has released Chrome version 102.0.5005.61 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release Note and apply the necessary update. Thi...

GHSA-3264-65PG-5XM4 Dolibarr ERP and CRM HTML Injection

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

Dolibarr ERP and CRM HTML Injection

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

Dolibarr Cross-site Scripting in a User Note section

Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin...

GHSA-M44P-CFWJ-WWR6 Dolibarr Cross-site Scripting in a User Note section

Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin...