22 matches found
CVE-2025-30528
creationtimestamp| type| source ---|---|--- 2025-03-24 14:40:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3ll4yegdftk22 2025-03-24 14:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114217956754829777 2025-03-24 16:39:39+00:00| seen|...
CVE-2025-30528 WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in wpshopee Awesome Logos awesome-logos allows SQL Injection.This issue affects Awesome Logos: from n/a through = 1.2...
CVE-2025-30528
CVE-2025-30528 affects the WordPress plugin Awesome Logos (
CVE-2021-30528
creationtimestamp| type| source ---|---|--- 2024-10-04 14:35:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4481...
CVE-2024-30528 WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10...
CVE-2024-30528
CVE-2024-30528 is a Missing Authorization (Broken Access Control) vulnerability in Spiffy Calendar (Spiffy Plugins) affecting Spiffy Calendar versions up to 4.9.10. Exploitation would require network access with low privileges and no user interaction; the CVSS base metrics indicate Confidentialit...
CVE-2023-30528
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:21+00:00| seen| https://t.me/cibsecurity/61992...
CVE-2023-30528
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it...
CVE-2023-30528
CVE-2023-30528 affects Jenkins WSO2 Oauth Plugin 1.0 and earlier. Root cause: the WSO2 Oauth client secret is stored unencrypted in the global config.xml and the global configuration form does not mask the secret, enabling observers with Jenkins controller file-system access to view the secret. I...
CVE-2022-30528
creationtimestamp| type| source ---|---|--- 2022-12-01 16:45:33+00:00| seen| https://t.me/cibsecurity/53763 2025-04-24 19:06:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13322...
CVE-2022-30528
CVE-2022-30528 : A SQL injection exists in the asith-eranga ISIC tour booking application. The vulnerability affects the username parameter in /system/user/modules/mod_users/controller.php, allowing an attacker to execute arbitrary commands. It is documented with a high impact (C, I, A = HIGH) an...
CVE-2022-30528
SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...
CVE-2021-30528
Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30528
CVE-2021-30528 is a use-after-free vulnerability in the Chromium WebAuthentication component (Chromium/Google Chrome) on Android, before version 91.0.4472.77. The issue can allow a remote attacker who has compromised the renderer process of a user who saved a credit card in their Google account t...
CVE-2021-30528
Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30528
Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0840-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0825-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Microsoft Edge (Chromium) < 91.0.864.37 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.37. It is, therefore, affected by multiple vulnerabilities as referenced in the May 27, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Chromium: CVE-2021-30528 Use after free in WebAuthentication
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...