CVE-2021-24897

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24897

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24897: Improper Neutralization of Input During Web Page Generation

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

PT-2022-9495

Name of the Vulnerable Software and Affected Versions Add Subtitle WordPress plugin versions prior to 1.1.1 Description The issue allows users with a role as low as contributor to perform Cross-Site Scripting attacks due to the lack of sanitization or escaping of the sub-title field when output i...

CVE-2021-46408

Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub422CE4. This vulnerability allows attackers to cause a Denial of Service DoS via the strcpy parameter...

Potential lock of rewards in the custody contracts

Lines of code Vulnerability details Impact The swaptostabledenom function in the custody contracts swaps all other native tokens into a specific one. The function creates swap messages for all the other native tokens and adds them as sub-messages, and handles the reply only when the last...

PT-2022-17364

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack overflow was discovered in the function sub 42E328, allowing attackers to cause a Denial of Service DoS via the list parameter. Recommendations For Tenda AX12 version 22.03.01.21, consider...

PT-2022-17368

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack overflow was discovered in the function sub 4327CC, allowing attackers to cause a Denial of Service DoS via the list parameter. Recommendations For Tenda AX12 version 22.03.01.21, consider...

PT-2022-12691

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack buffer overflow was discovered in the function sub 422CE4, allowing attackers to cause a Denial of Service DoS via the strcpy parameter. Recommendations For Tenda AX12 version 22.03.01.21,...

Inconsistency behavior between bAsset tokens and the standard cw20 tokens

Lines of code Vulnerability details Impact The implementation of the send function of bAsset tokens is inconsistent with the standard cw20's implementation. In the standard implementation, the msg and the transfer amount are passed to the recipient contract as a regular message. However, in the...

PT-2022-17369

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack overflow was discovered in the function sub 42DE00, allowing attackers to cause a Denial of Service DoS via the list parameter. Recommendations For Tenda AX12 version 22.03.01.21, consider...

WordPress的Hotscot Contact Form插件 SQL注入漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.A SQL injection vulnerability exists in WordPress Hotscot Contact Form, which stems from a view submission featu...

PT-2022-9463

Name of the Vulnerable Software and Affected Versions Hotscot Contact Form WordPress plugin versions prior to 1.3 Description The issue concerns the view submission functionality in the plugin, which makes a GET request with the sub id parameter. This parameter is not sanitized, escaped, or...

Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode

/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...

PT-2022-10650

Name of the Vulnerable Software and Affected Versions Xerox Phaser 4622 version 35.013.01.000 Description A buffer overflow issue was discovered in the function sub 3226AC via the TIMEZONE variable, allowing attackers to cause a Denial of Service DoS via crafted overflow data. Recommendations For...

PT-2022-36833

Name of the Vulnerable Software and Affected Versions coap affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the coap split uri sub and coap get uri path functions. Recommendations At the moment, there is no information about a newer...

PT-2022-36821

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the coap split uri sub and coap get uri path functions. Recommendations At the...

CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

MariaDB DoS Vulnerability (MDEV-25761) - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

CVE-2021-24937

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacuselectedsubtabarea parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue...