CVE-2024-0769

creationtimestamp| type| source ---|---|--- 2024-01-20 22:51:18+00:00| seen| https://t.me/ctinow/170736 2024-01-21 09:21:21+00:00| seen| https://t.me/ctinow/170778 2024-01-25 16:56:00+00:00| published-proof-of-concept| https://t.me/CNArsenal/1901 2024-01-25 16:56:39+00:00|...

CVE-2023-0769

creationtimestamp| type| source ---|---|--- 2024-01-16 17:26:58+00:00| seen| https://t.me/ctinow/168902...

CVE-2023-0769

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins...

CVE-2023-0769

The CVE-2023-0769 entry concerns hiWeb Migration Simple WordPress plugin (

CVE-2023-0769 hiWeb Migration Simple <= 2.0.0.1 Reflected Cross-Site Scripting

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins...

CVE-2023-0769 hiWeb Migration Simple <= 2.0.0.1 Reflected Cross-Site Scripting

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins...

Festo CECX-X-C1 and CECX-X-M1 Improper Authentication (CVE-2014-0769)

The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX- X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allows remote attackers to 1 modify the configuration via a request to the debug service on port 4000 ...

WordPress hiWeb Migration Simple Plugin <= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS)

Software hiWeb Migration Simple Type Plugin Vulnerable versions = 2.0.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0769 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 77c2c54b62e4 Credits Shreya Pohekar...

CVE-2022-0769 Users Ultra <= 3.1.0 - Unauthenticated SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...

CVE-2022-0769

Summary (concrete details from connected docs): CVE-2022-0769 affects the WordPress plugin Users Ultra up to version 3.1.0 . The vulnerability stems from improper sanitization/escaping of the data_target parameter before it is interpolated into an SQL statement, which is then executed via the rat...

CVE-2021-0769

The CVE-2021-0769 issue affects Google Android 12, specifically the AllowBindAppWidgetActivity.java onCreate path where an unclear UI can bypass user interaction requirements. This leads to local privilege escalation with no additional execution privileges needed, with exploitation requiring user...

SUSE: Security Advisory (SUSE-SU-2013:0306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0769-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-0769

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows CSC Service Elevation of Privilege Vulnerability'. This CVE ID is unique from...

GHSA-PJPJ-F6R8-56RM High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773...

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773...

GHSA-3W9Q-C44J-37JJ High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-077...

GHSA-FVPG-QX3G-7MP7 High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-077...