The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from the improper use of privileged APIs, allowing an attacker to install extensions.

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to the improper use of privileged APIs. Exploiting this vulnerability allows a malicious actor to install extensions by capturing the link to the eval function from the about:blank window, there...

CVE-2022-36387

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-36387

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36427

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

Improper access control

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

Improper access control

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36427 WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-36427

The CVE-2022-36427 entry concerns the WordPress About Rentals plugin (versions

CVE-2022-36387

CVE-2022-36387 affects the WordPress plugin About Me (versions ≤ 1.0.12). The issue is described as a Broken Access Control vulnerability, enabling an authenticated user (e.g., a Subscriber) to perform unsafe actions via AJAX, including arbitrary network creation/deletion . This stems from insuff...

CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...

WordPress plugin About Rentals 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2022-23363 · WordPress · About Rentals Plugin

Name of the Vulnerable Software and Affected Versions: About Rentals plugin versions prior to 1.6 Description: The issue is related to a Missing Access Control vulnerability in the About Rentals plugin for WordPress. Recommendations: For versions prior to 1.6, update to version 1.6 or later to...

PT-2022-23346 · WordPress · Aboutme

Name of the Vulnerable Software and Affected Versions: About Me plugin versions prior to 1.0.13 Description: The issue is related to a Broken Access Control vulnerability. Recommendations: For versions prior to 1.0.13, update to version 1.0.13 or later to resolve the issue...

Xerox DocuShare Detection (HTTP)

HTTP based detection of Xerox DocuShare. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

WordPress plugin About Me 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ptsfence Patchstack Alliance in WordPress About Me plugin versions = 1.0.12. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full review...

jeremyreiss.fr Cross Site Scripting vulnerability OBB-2856889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aterteramo.it Cross Site Scripting vulnerability OBB-2848491

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...