CVE-2022-45368

CVE-2022-45368 affects WordPress plugin 1003 Mortgage Application (

CVE-2022-45368 WordPress 1003 Mortgage Application plugin <= 1.75 - Local File Inclusion

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Lenderd 1003 Mortgage Application allows Relative Path Traversal.This issue affects 1003 Mortgage Application: from n/a through 1.75...

CVE-2024-1003

creationtimestamp| type| source ---|---|--- 2024-01-29 16:26:34+00:00| seen| https://t.me/ctinow/175379 2024-02-21 10:11:36+00:00| seen| https://t.me/ctinow/189425...

CVE-2024-1003

Totolink N200RE is affected by CVE-2024-1003 in the setLanguageCfg function of /cgi-bin/cstecgi.cgi. The lang parameter causes a stack-based buffer overflow, with remote exploitation possible. Affected version: 9.3.5u.6139_B20201216. Public exploit details exist. PT-Security notes this as a criti...

Malicious code in wlwz-2312-1003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8064ee2fcb9b3600964208a441c75e136578227a77276e909535fb286e0312d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-263 Malicious code in wlwz-2312-1003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8064ee2fcb9b3600964208a441c75e136578227a77276e909535fb286e0312d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45357

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75...

CVE-2022-45357 WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75...

CVE-2022-45357

CVE-2022-45357 affects WordPress plugin 1003 Mortgage Application (versions ≤ 1.75). Root cause: improper neutralization of formula elements in CSV files, enabling CSV injection. Impact as per sources is high severity; CVSS in the entry shows 9.8 (CRITICAL) with network vectors and high confident...

CVE-2022-45357 WordPress 1003 Mortgage Application plugin <= 1.75 - CSV Injection

A vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application.This issue affects 1003 Mortgage Application: from n/a through = 1.75...

PT-2023-14647 · Unknown · Lenderd 1003 Mortgage Application

Name of the Vulnerable Software and Affected Versions: Lenderd 1003 Mortgage Application versions 1.75 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the 1003 Mortgage Application. Recommendations: For versions 1.75 an...

Oracle Linux 7 : mod_auth_mellon (ELSA-2020-1003)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1003 advisory. - Resolves: rhbz1731052 - CVE-2019-13038 modauthmellon: an Open Redirect via the login?ReturnTo= substring which could facilitate information theft rhel-7 -...

CVE-2023-1003

creationtimestamp| type| source ---|---|--- 2023-03-07 22:23:24+00:00| seen| https://t.me/cibsecurity/59617...

CVE-2023-1003 Typora WSH JScript code injection

A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and m...

CVE-2023-1003

Typora (on Windows) up to v1.5.5 contains a code injection vulnerability in the WSH JScript Handler component. The issue requires local access to exploit and has been publicly disclosed. Upgrading to v1.5.8 fixes the flaw; as a temporary workaround, restrict access to the WSH JScript Handler. Aff...

SUSE CVE-2011-1003

Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...

WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

Software 1003 Mortgage Application Type Plugin Vulnerable versions = 1.75 Fixed in 1.80 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-45357 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID aadde6bd0ebf Credits Rodrigo Escobar ipax Required privilege...

GHSA-FXRX-5J36-PWG5 Chakra Scripting Engine RCE via Out-of-bounds write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

CVE-2022-1003 Sysadmin can override existing configs & bypass restrictions like EnableUploads

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads...