CVE-2022-1910

The CVE-2022-1910 is tied to the WordPress Shortcodes and Extra Features for Phlox plugin (pre-2.9.8). The NUCLEI template confirms a cross-site scripting flaw where the plugin does not sanitize/escape a parameter before echoing it in the response. This allows an attacker to inject arbitrary scri...

SUSE SLES15 Security Update : hdf5 (SUSE-SU-2022:1910-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1910-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. -...

WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted

A security vulnerability in WhatsApp’s pic-retouching function could allow an attacker to read sensitive information from the WhatsApp memory, researchers said – so users should be careful whose pics they view and should, of course, update their apps. Disclosed by Check Point Research CPR, the...

WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers

A now-patched high-severity security vulnerability in WhatApp's image filter feature could have been abused to send a malicious image over the messaging app to read sensitive information from the app's memory. Tracked as CVE-2020-1910 CVSS score: 7.8, the flaw concerns an out-of-bounds read/write...

CVE-2021-1910

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1910

CVE-2021-1910 is reported as a double-free in Qualcomm’s video stack caused by missing input-buffer length checks. Public sources tie it to Qualcomm closed‑source components (Snapdragon family) and reference a May‑2021 Qualcomm bulletin for fixes. Exploitation details are not provided in the supp...

CVE-2021-1910

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

SUSE: Security Advisory (SUSE-SU-2017:1910-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1910

creationtimestamp| type| source ---|---|--- 2021-02-02 22:39:52+00:00| seen| https://t.me/cibsecurity/22964 2021-09-02 16:04:15+00:00| seen| https://t.me/thebugbountyhunter/5635 2021-09-02 19:51:54+00:00| seen| https://t.me/cKure/6911 2021-09-02 23:22:20+00:00| seen| https://t.me/ctinow/39357...

CVE-2020-1910

WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 contains a heap-based out-of-bounds read/write in the native function applyFilterIntoBuffer() (libwhatsapp.so) when applying certain image filters. The root cause is a missing bounds check and an assump...

Photon OS 2.0: Yum PHSA-2019-2.0-0190

An update of the yum package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132535;...

CVE-2013-1910

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

CVE-2013-1910

CVE-2013-1910 affects the yum package, where improper handling of bad metadata can cause a denial of service and potentially other unspecified impact via a Trojan horse file in the metadata of a remote repository. The vulnerability is documented with high/critical severity (CVSS 2.0/3.1) and is r...

Remote SSL Peer sent a handshake failure- on CWA 1910 for Mac and macOS Catalina

When trying to connect user receives "The remote SSL peer sent a handshake failure alert"...

"Certificate is not Trusted" on CWA 1910 for Mac and macOS Catalina

You have not chosen to trust "GlobalSign Root CA", the issuer of the server's security certificate...

CVE-2019-1910

Cisco IOS XR Software prior to Release 6.6.3 is vulnerable to an IS-IS Denial of Service through crafted IS-IS link-state PDUs. The issue stems from incorrect processing of these PDUs, allowing an unauthenticated attacker in the same IS-IS area to trigger a restart of the IS-IS process and a DoS ...

CVE-2018-1910

IBM Rational Engineering Lifecycle Manager (REL M) versions 5.0 through 6.0.6 are affected by a cross-site scripting (XSS) vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Root cause: improper hand...

Consona Password Reset Security Bypass Vulnerability

Exploit for php platform in category web applications 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/login.asp", had a commented access to the page that...

Consona Password Reset Security Bypass

Hi!! 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/login.asp", had a commented access to the page that allowed to change the password of any user, with a li...

SAP NetWeaver J2EE Engine 7.40 SQL Injection

!/usr/bin/env python coding=utf-8 """ Author: Vahagn Vardanyan https://twitter.com/vah13 Bugs: CVE-2016-2386 SQL injection CVE-2016-2388 Information disclosure CVE-2016-1910 Crypto issue Follow HTTP request is a simple PoC for anon time-based SQL injection CVE-2016-2386 vulnerability in SAP...