OpenHarmony 安全漏洞

OpenHarmony is a kind of hongmeng operating system of open source projects. A code execution vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to execute arbitrary code...

PT-2023-32490 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through type confusion. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment, there is no...

OpenHarmony 安全漏洞

OpenHarmony is China's OpenAtom Foundation OpenAtom Foundation Foundation of a kind of Hongmeng operating system of open source projects. A security vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to obtain confidential information or rewrite...

PT-2023-28875 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to perform arbitrary file read and write operations due to improper preservation of permissions. Recommendations: For OpenHarmony versions prior to 3.2.2, at t...

OpenHarmony 安全漏洞

OpenHarmony is a kind of hongmeng operating system open source project. A security vulnerability exists in OpenHarmony before version v3.2.2, which can be exploited by attackers to cause system information leakage...

PT-2023-29846 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to obtain sensitive buffer information through the use of an uninitialized resource. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment,...

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v3.2.2 that stems from accessing confidential information through incorrect default permissions...

PT-2023-28582 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to obtain confidential information due to incorrect default permissions. Recommendations: For OpenHarmony versions prior to 3.2.2, update to a version that fix...

phpMyFAQ FileName parameter cross-site scripting vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the FileName parameter of the file attachment upload function, an...

CVE-2023-5863

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5867 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5867 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the FileName parameter of the file attachment upload function, an...

phpMyFAQ 安全漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. An information disclosure vulnerability exists in phpMyFAQ versions prior to 3.2.2, which stems from the presence of sensitive cookies in an HTTPS session, and can be exploited by an attacker to obtain sensitive information...

CVE-2023-45759

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Peter Keung Peter’s Custom Anti-Spam plugin = 3.2.2 versions...

Cross site request forgery (csrf)

The Custom Banners plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.2 This is due to missing or incorrect nonce validation on the saveCustomFields function. This makes it possible for unauthenticated attackers to save custom fields via a forge...

Spring Cloud 3.2.2 - Remote Command Execution (RCE)

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Date: 07/07/2023 Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...