WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...

Ansible Code Injection Vulnerability

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

GHSA-66C7-5PWV-MM3J Ansible Code Injection Vulnerability

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling B2B Integrator (CVE-2020-4657)

Summary IBM Sterling B2B Integrator has addressed a XSS vulnerability. Vulnerability Details CVEID:CVE-2020-4657 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Apple Safari WebKit Memory Corruption (CVE-2016-4657)

A memory corruption vulnerability exists in the WebKit component of Apple Safari. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a victim to browse to a maliciously crafted web page...

CVE-2020-4657

creationtimestamp| type| source ---|---|--- 2020-12-17 00:42:01+00:00| seen| https://t.me/cibsecurity/20961...

CVE-2020-4657

The IBM Sterling B2B Integrator CVE-2020-4657 affects Standard Edition versions 5.2.0.0 through 6.0.3.2. It is a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially disclosing credentials in a trusted session. Remediation: upgrade to IBM ...

Debian DSA-4657-1 : git - security update

Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential information for a wrong host. C Tenable Network Security, Inc. The...

Debian: Security Advisory (DSA-4657-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4657

The safeeval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions...

CVE-2014-4657

The CVE-2014-4657 entry concerns Ansible’s safe_eval, where the code subset is not properly restricted. Connected documents confirm the flaw affects Ansible versions prior to 1.5.4 (the primary reference) and note that subsequent advisories describe an incomplete fix, with some sources indicating...

PYSEC-2020-203

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

Code injection

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

PYSEC-2020-203

The safeeval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657...

CVE-2010-4657

creationtimestamp| type| source ---|---|--- 2019-11-20 16:31:10+00:00| seen| https://t.me/cibsecurity/8221 2024-02-13 11:31:19+00:00| seen| https://t.me/ctinow/183749...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This vulnerability is distinct from CVE-2015-4657...

CVE-2010-4657

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output...

CVE-2010-4657

CVE-2010-4657 affects PHP5 prior to 5.4.4. The flaw allows passing invalid UTF-8 strings to xmlTextWriterWriteAttribute, which are misparsed by libxml2, causing a memory leak in the produced output. The vulnerability is triggered through the attribute-writing path and is not described as exploita...

CVE-2013-4657

The CVE-2013-4657 entry describes a Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L caused by misconfiguration in the SMB service. Affected product(s): NETGEAR WNR3500U and WNR3500L routers. Reported impact in the sources indicates high severity, with the vulnerability enabling p...

WebKit not_number defineProperties Use-After-Free Exploit

Exploit for multiple platform in category dos / poc This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebKit notnumber defineProperties UAF', 'Description' = %q This module exploits a UAF...