CVE-2023-6530

creationtimestamp| type| source ---|---|--- 2024-01-29 16:26:25+00:00| seen| https://t.me/ctinow/175371...

CVE-2023-6530

CVE-2023-6530 affects TJ Shortcodes WordPress plugin versions

CVE-2023-6530 TJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via Shortcodes

The TJ Shortcodes WordPress plugin through 0.1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress TJ Shortcodes Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software TJ Shortcodes Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6530 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 023f1a33a7c9 Credits Dmitrii Ignatyev Required...

CVE-2023-5619

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6530. Reason: This candidate is a reservation duplicate of CVE-2023-6530. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : HAProxy vulnerability (USN-6530-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6530-1 advisory. It was discovered that HAProxy incorrectly handled URI components containing the hash character . A remote attacker could possibly use this...

K15725: Multiple 5.5.x and 5.6.x MySQL vulnerabilities

Security Advisory Description CVE-2014-6507 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML. CVE-2014-6491 Unspecified...

SUSE CVE-2020-6530

Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2018-6530

creationtimestamp| type| source ---|---|--- 2022-09-07 14:36:07+00:00| seen| MISP/65f9cb29-4429-4318-a02e-084a7f449e16 2022-09-07 15:31:02+00:00| exploited| https://t.me/truesecator/3387 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:33:00+00:00| seen|...

Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities

A variant of the Mirai botnet known as MooBot is co-opting vulnerable D-Link devices into an army of denial-of-service bots by taking advantage of multiple exploits. "If the devices are compromised, they will be fully controlled by attackers, who could utilize those devices to conduct further...

Fedora 31 : chromium (2020-84d87cbd50)

Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526...

Fedora 32 : chromium (2020-bf684961d9)

Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526...

GLSA-202007-08 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-08 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

CVE-2020-6530

Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2020-6530

CVE-2020-6530 affects Google Chrome (Chromium-based) with an out-of-bounds memory access in Developer Tools prior to 84.0.4147.89. A user-assisted exploit via a crafted malicious extension could potentially cause heap corruption. The connected advisories indicate fixes in Chrome/Chromium branches...

openSUSE Security Update : chromium (openSUSE-2020-1021)

This update for chromium fixes the following issues : - Update to 84.0.4147.89 boo1174189 : - Critical CVE-2020-6510: Heap buffer overflow in background fetch. - High CVE-2020-6511: Side-channel information leakage in content security policy. - High CVE-2020-6512: Type Confusion in V8. - High...

CVE-2020-6530

Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

Google Chrome < 84.0.4147.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed...

CVE-2019-6530

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, which may lead to remote code execution...

CVE-2019-6530

CVE-2019-6530 affects Panasonic FPWIN Pro software (version 7.3.0.0 and earlier). The flaw is a heap-based buffer overflow in parsing attacker-created PRO project files, caused by insufficient validation of user-supplied data before copying to a heap buffer, enabling remote code execution. ZDI ad...