Photon OS 3.0: Bzr PHSA-2023-3.0-0611

An update of the bzr package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20399...

WordPress Master Slider Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

Software Master Slider Type Plugin Vulnerable versions = 3.10.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0611 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8edcbe7d9058 Credits Akbar Kustirama Required...

CVE-2024-0611

creationtimestamp| type| source ---|---|--- 2024-03-02 13:27:02+00:00| seen| https://t.me/ctinow/198349 2024-03-02 13:31:58+00:00| seen| https://t.me/ctinow/198354...

CVE-2024-0611

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slides callback functionality in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers, with editor-level access, to inject arbitrary web...

CVE-2024-0611 Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slides callback functionality in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers, with editor-level access, to inject arbitrary web...

CVE-2024-0611 Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slides callback functionality in all versions up to, and including, 3.9.9. This makes it possible for authenticated attackers, with editor-level access, to inject arbitrary web...

CVE-2024-0611

CVE-2024-0611 affects Master Slider – Responsive Touch Slider for WordPress. Connected docs confirm a Stored Cross-Site Scripting flaw in the slides callback, impacting versions up to and including 3.9.5. Exploitation requires authenticated Editor+ access and affects multisite setups or sites wit...

Splunk Enterprise 8.1.0 < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0611)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0611 advisory. - In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an...

openSUSE 15 Security Update : pkgconf (SUSE-SU-2023:0611-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:0611-1 advisory. - CVE-2023-24056: Fixed unbounded string expansion due to incorrect checks in libpkgconf/tuple.c bsc1207394. Tenable has extracted the preceding description...

Oracle Linux 9 : git (ELSA-2023-0611)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0611 advisory. - Fixes CVE-2022-23521 and CVE-2022-41903 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

RHEL 9 : git (RHSA-2023:0611)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0611 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

CVE-2023-0611

creationtimestamp| type| source ---|---|--- 2023-02-01 16:14:20+00:00| seen| https://t.me/cibsecurity/57296 2026-06-23 14:06:14+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/938b0e46-d196-449d-8c6b-3cf2f3e1d7f1 2026-06-30 12:19:19+00:00| exploited|...

CVE-2023-0611

CVE-2023-0611 affects TRENDnet TEW-652BRP (3.04B01) Web Management Interface. The vulnerability is a command-injection flaw in the get_set.ccp handling, allowing remote exploitation with high impact to confidentiality, integrity, and availability. Numerous sources corroborate a publicly disclosed...

Trojan-Banker.Win32.Banbra.cyt MVID-2022-0611 Insecure Permissions

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/e0f2bee25dd103d92e91e895e313ec34.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Banker.Win32.Banbra.cyt Vulnerability: Insecure Permissions Description: The malwar...

CVE-2022-0611

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0611

CVE-2022-0611 concerns an elevation of privilege in the open-source asset management solution Snipe-IT . The vulnerability stems from missing/ improper authorization (privilege management) in versions prior to 5.3.11 , allowing an unprivileged user to perform maintenance-related actions for asset...

CVE-2022-0611 Missing Authorization in snipe/snipe-it

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2021-0611

creationtimestamp| type| source ---|---|--- 2021-09-27 16:34:47+00:00| seen| https://t.me/cibsecurity/29449...

CVE-2021-0611

CVE-2021-0611 affects the Mediatek m4u component, where a memory corruption due to a use-after-free condition can cause local escalation of privilege to SYSTEM, with no user interaction required. The entry notes a patch ID ALPS05403499 and an issue ID ALPS05425810 as fixes. Connected documents re...

CentOS 8 : xterm (CESA-2021:0611)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0611 advisory. - xterm: crash when processing combining characters CVE-2021-27135 Note that Nessus has not tested for this issue but has instead relied only on the application...