CVE-2017-20088

A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

CVE-2017-20088

Caused by missing anti-CSRF token validation in the Atahualpa Theme, enabling cross-site request forgery (CSRF) that can be triggered remotely. The available sources consistently describe CSRF as the vulnerability impact, but do not specify affected versions, exploit details, or a concrete remedi...

CVE-2017-20088 Atahualpa Theme cross-site request forgery

A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

json_index (0.0.0), koios (>=0.0.1, <=1.0.1) +5 more potentially affected by CVE-2021-20088 via mootools-more (>=1.5.1, <=1.5.2)

mootools-more NPM version =1.5.1, =0.0.1, =0.1.0, =0.0.0, =0.1.0, =0.1.0, =0.8.3 - youtube-playlist-download 1.0.0 Source cves: CVE-2021-20088 Source advisory: OSV:GHSA-FW45-938V-P26J...

CVE-2022-20088

creationtimestamp| type| source ---|---|--- 2022-05-04 00:34:24+00:00| seen| https://t.me/cibsecurity/41858...

CVE-2022-20088

The CVE-2022-20088 entry concerns the aee driver, where a reference count handling error may allow local privilege escalation to System level without user interaction. The issue is tied to incorrect error handling that can lead to a reference count mistake. A patch is identified as ALPS06209201 (...

CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20088

CVE-2021-20088 affects Mootools More 1.6.0. The vulnerability is prototype pollution caused by improper modification of Object.prototype, allowing an attacker to inject properties into Object.prototype. CVSSv3.1 base score 8.8 (HIGH) with network attack, low complexity, and privileges required: L...

CVE-2021-20088

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype...

CVE-2019-20088

CVE-2019-20088 refers to the GoPro GPMF-parser version 1.2.3, which has a heap-based buffer over-read in the GetPayload function of GPMF_mp4reader.c. The vulnerability is documented across multiple sources (NVD, Red Hat CVE page, etc.), with CVSS v3.1 scores indicating a HIGH severity if exploite...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Symantec Web...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

This module exploits a command injection vulnerability found in Symantec Web Gateway's HTTP service. While handling the filename parameter, the Spywall API does not do any filtering before passing it to an exec call in proxyfile, thus results in remote code execution under the context of the web...