90 matches found
mooSocial 3.1.8 Cross Site Scripting
Exploit Title: mooSocial 3.1.8 - Reflected XSS Exploit Author: CraCkEr Date: 28/07/2023 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link: https://travel.moosocial.com/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE: CVE-2023-4173 Greetings...
CVE-2023-4173
CVE-2023-4173 affects mooSocial mooStore 3.1.6; a cross-site scripting flaw resides in the /search/index handler via the q parameter. The vulnerability can be triggered remotely, enabling execution of malicious scripts in a victim’s browser (XSS) and potentially session/token theft. Public proof-...
SUSE CVE-2021-4173
vim is vulnerable to Use After Free...
RHEL 7 : rh-maven35-jackson-databind (RHSA-2020:4173)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4173 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security Fixe...
Researchers Demonstrate How EDR and Antivirus Can Be Weaponized Against Users
High-severity security vulnerabilities have been disclosed in different endpoint detection and response EDR and antivirus AV products that could be exploited to turn them into data wipers. "This wiper runs with the permissions of an unprivileged user yet has the ability to wipe almost any file on...
CVE-2022-4173
creationtimestamp| type| source ---|---|--- 2022-12-12 14:55:50+00:00| seen| https://t.me/itsecnews/1911...
CVE-2022-4173 Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation
A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10...
CVE-2022-4173 Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation
A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10...
CVE-2022-4173
CVE-2022-4173 affects Avast/AVG Antivirus for Windows. A vulnerability in the malware removal feature allows an attacker with write access to the filesystem to escalate privileges in certain scenarios. Root cause is described as insecure privilege management within the malware removal functionali...
CVE-2021-4173 affecting package vim for versions less than 8.2.4081-1
CVE-2021-4173 affecting package vim for versions less than 8.2.4081-1. An upgraded version of the package is available that resolves this issue...
Amazon Linux 2 : vim, --advisory ALAS2-2022-1743 (ALAS-2022-1743)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1743 advisory. vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a...
Fedora: Security Advisory for vim (FEDORA-2022-48b86d586f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Medium: vim
Issue Overview: Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. CVE-2020-20703 vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 A flaw was found in vim. A possible heap-based buffer overflow could allow an...
CVE-2021-4173 affecting package vim 8.2.3668-4
CVE-2021-4173 affecting package vim 8.2.3668-4. An upgraded version of the package is available that resolves this issue...
CVE-2021-4173
creationtimestamp| type| source ---|---|--- 2021-12-27 16:23:10+00:00| seen| https://t.me/cibsecurity/34669...
CVE-2021-4173
vim is vulnerable to Use After Free...
ALPINE-CVE-2021-4173
vim is vulnerable to Use After Free...
AZL-7084 CVE-2021-4173 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Use After Free...