CVE-2023-0069 WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0069

The CVE-2023-0069 entry concerns the WordPress plugin WPaudio MP3 Player up to version 4.0.2 . The issue is a stored cross-site scripting (XSS) vulnerability caused by not validating/escaping certain shortcode attributes before rendering them in posts/pages, enabling users with the contributor ro...

WordPress WPaudio MP3 Player Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software WPaudio MP3 Player Type Plugin Vulnerable versions = 4.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0069 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID aeffad94b998 Credits Lana Codes Requir...

SUSE: Security Advisory (SUSE-SU-2023:0069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libSDL2-2_0-0 / libSDL2-2_0-0-32bit / libSDL2-devel / etc (SUSE-SU-2023:0069-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0069-1 advisory. - CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image bsc1206727...

Mageia: Security Advisory (MGASA-2014-0206)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0208)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0069)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0207)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0069

creationtimestamp| type| source ---|---|--- 2021-11-17 22:21:15+00:00| seen| https://t.me/cibsecurity/32578...

CVE-2021-0069

Improper input validation in firmware for some IntelR PROSet/Wireless WiFi in multiple operating systems and some KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0069

Improper input validation in firmware for some IntelR PROSet/Wireless WiFi in multiple operating systems and some KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0069

CVE-2021-0069 concerns improper input validation in firmware for Intel PROSet/Wireless WiFi and some Killer WiFi in Windows 10, allowing an unauthenticated user to potentially cause denial of service via adjacent access. Affected products include various Intel PROSet/Wireless WiFi adapters and Ki...

Android Kernel Use-After-Free Vulnerability

Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."...

Android Kernel Out-of-Bounds Write Vulnerability

Android Kernel bindertransaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."...

Moderate Photon OS Security Update - PHSA-2021-4.0-0069

Updates of 'curl' packages of Photon OS have been released...

GHSA-QC36-Q22Q-CJW3 SMTP command injection in lettre

Impact Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write...

SUSE: Security Advisory (SUSE-SU-2014:0459-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trojan.Win32.Cospet.abg Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5f5b308853b9aa9243390c135ff6ba1b.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Cospet.abg Vulnerability: Insecure Permissions EoP Description: Cospet.abg, creates an...