92 matches found
CVE-2023-4944
CVE-2023-4944 affects the WordPress plugin Awesome Weather Widget (WordPress plugin). The Red Hat and Wordfence records confirm a Stored Cross-Site Scripting (XSS) vulnerability via the shortcodes: specifically, the awesome-weather shortcode can be exploited due to insufficient input sanitization...
WordPress Awesome Weather Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Awesome Weather Widget Type Plugin Vulnerable versions = 3.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4944 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID caba79ed19c3 Credits Lana Codes Required...
KodExplorer 4.49 - CSRF to Arbitrary File Upload Exploit
Exploit Title: KodExplorer ?php s...
KodExplorer 4.49 - CSRF to Arbitrary File Upload
Exploit Title: KodExplorer | | | | | | | / | | |\ \ | /| | | //|/ //\ ./||/|| || | | // | | || KODExplorer = v4.49 Remote Code Executon Coded by MrEmpy ''' def httpd: port = 8080 httpddir = os.path.joinos.path.dirnamefile, 'http' os.chdirhttpddir Handler =...
CVE-2022-4944
KodExplorer (kalcaddle) up to version 4.49 contains a cross-site request forgery (CSRF) vulnerability. The issue affects an unknown part of the software and can be triggered remotely; exploits have been publicly disclosed. Upgrading to version 4.50 addresses the issue. Multiple connected sources ...
Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer
「💥」CVE-2022-4944 Description A vulnerability, which was c...
Exploit for Cross-Site Request Forgery (CSRF) in Kodcloud Kodexplorer
「💥」CVE-2022-4944 Description A vulnerability, which was c...
KODExplorer 4.49 Cross Site Request Forgery / Shell Upload
Exploit Title: KodExplorer ' path = '/data/User/admin/home/' targetpath = input' Target KODExplorer path ex /var/www...
Security Bulletin: Cross-Site Scripting Security Vulnerability in IBM Maximo Asset Management (CVE-2015-4944)
Summary A cross-site scripting vulnerability in Maximo Asset Management could allow an attacker to execute script in a victim's Web browser, within the security context of the hosting Web site. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry...
Ubuntu: Security Advisory (USN-4944-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : MariaDB regression (USN-4944-2)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4944-2 advisory. USN-4944-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. Tenable has extracted the preceding description block directly...
Debian: Security Advisory (DSA-4944-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2012:0642-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : MariaDB vulnerabilities (USN-4944-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4944-1 advisory. This update fixed multiple vulnerabilities in MariaDB. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.48. Ubuntu 20.04 LTS has been updated to...
Ubuntu: Security Advisory (USN-4944-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4944
IBM UrbanCode Deploy UCD 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. IBM X-Force ID: 191944...
CVE-2020-4944
CVE-2020-4944 affects IBM UrbanCode Deploy (UCD) versions 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, 7.1.1.2. The issue is that keystore passwords are stored in plain text after a manual edit, allowing a local user to read them. The IBM security bulletin confirms this behavior...
RHEL 8 : thunderbird (RHSA-2020:4944)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4944 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.4.0. Security Fixes: Mozilla:...
CVE-2018-4944
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...