178 matches found
CVE-2025-0230 code-projects Responsive Hotel Site print.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file /admin/print.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Photon OS 4.0: Linux PHSA-2022-4.0-0230
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0230. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Redis PHSA-2022-4.0-0230
An update of the redis package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0230. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for CVE-2024-0230
cve-2024-0230-blue Helper script to...
Important Photon OS Security Update - PHSA-2024-5.0-0230
Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...
CVE-2024-0230
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...
CVE-2024-0230
Summary (CVE-2024-0230): A session management issue in Apple Magic Keyboard is addressed by firmware update 2.0.6. With physical access to the accessory, an attacker may extract the Bluetooth pairing key and monitor Bluetooth traffic. Provided sources consistently cite the fix in Magic Keyboard F...
CVE-2024-0230
creationtimestamp| type| source ---|---|--- 2024-01-12 11:00:21+00:00| seen| https://t.me/itsecnews/3966 2024-01-12 11:11:47+00:00| seen| https://t.me/breachdetector/419178 2024-01-13 00:26:40+00:00| seen| https://t.me/ctinow/167626 2024-01-20 15:05:14+00:00| published-proof-of-concept|...
About the security content of Magic Keyboard Firmware Update 2.0.6
About the security content of Magic Keyboard Firmware Update 2.0.6 This document describes the security content of Magic Keyboard Firmware Update 2.0.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation h...
F5 Networks BIG-IP : Apache Struts vulnerabilities (K35226442)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K35226442 advisory. - An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing...
Security Bulletin: Apache Tomcat vulnerabilities affect IBM SAN Volume Controller and Storwize Family (CVE-2014-0227 CVE-2014-0230)
Summary Apache Tomcat DoS and unauthorized access vulnerabilities Vulnerability Details This bulletin relates to vulnerabilities in the Apache Tomcat component which is used to provide the product’s management GUI. The CLI interface is unaffected. CVEID: CVE-2014-0227 DESCRIPTION: Apache Tomcat i...
Debian: Security Advisory (DLA-232-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress VK All in One Expansion Unit Plugin < 9.86.0.0 is vulnerable to Cross Site Scripting (XSS)
Software VK All in One Expansion Unit Type Plugin Vulnerable versions 9.86.0.0 Fixed in 9.86.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0230 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ada9adbd1470 Credits...
CVE-2023-0230 VK All in One Expansion Unit < 9.86.0.0 - Contributor+ Stored XSS
The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0230
The CVE-2023-0230 entry pertains to the VK All in One Expansion Unit WordPress plugin prior to version 9.86.0.0, which does not validate or escape certain block options when output in an embedded block, enabling Stored XSS for users with the contributor role or higher. Information from multiple c...
K17123: Apache Tomcat vulnerability CVE-2014-0230
Security Advisory Description Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption...
Important Photon OS Security Update - PHSA-2022-4.0-0230
Updates of 'redis', 'linux-aws', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0230
Updates of 'linux', 'redis', 'linux-secure', 'linux-aws', 'linux-rt' packages of Photon OS have been released...
Security Bulletin: IBM Sterling Order Management Apache Struts vulnerablity
Summary IBM Sterling Order Management Apache Struts vulnerablity Vulnerability Details CVEID:CVE-2019-0233 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by an access permission override when performing a file upload. By sending a specially crafted request, an attacker...