CVE-2023-3435 User Activity Log < 1.6.5 - Unauthenticated SQLi

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks...

CVE-2023-3435 User Activity Log < 1.6.5 - Unauthenticated SQLi

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks...

CVE-2023-3435

CVE-2023-3435 affects the WordPress plugin User Activity Log, versions before 1.6.5. The root cause is improper sanitization/escaping of parameters used in an SQL statement during the plugin’s export feature, enabling unauthenticated SQL injection. The vulnerability is rated CRITICAL (CVSS v3.1: ...

PT-2023-18020 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java. This could allow enabling developer options without the lockscreen PIN...

PT-2023-5955 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the decideCancelProvisioningDialog function of AdminIntegratedFlowPrepareActivity.java, which can be exploited to bypass factory reset protections...

WordPress plugin User Activity Log SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

User Activity Log < 1.6.7 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users to log." and save...

User Activity Log < 1.6.7 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. PoC 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users to log." and save...

PT-2023-17926 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing permission check in the onCreate method of ManagePermissionsActivity.java. This could allow bypassing factory reset...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from a messy proxy in the openContentUri module of ActivityManagerService.java, which can be exploited by an attacker to obtain sensitive...

PT-2023-17925 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the onCreate method of ManagePermissionsActivity.java. This could allow bypassing factory reset protections, leading to local escalatio...

PT-2023-18014 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the registerServiceLocked function of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a lack of privilege checking in Create of ManagePermissionsActivity.java, which can be exploited by an attacker to gain elevated privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code in the deceeCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, which can be exploited by an attacker to...

PT-2023-17933 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the onCreate method of ManagePermissionsActivity.java. This could allow bypassing factory reset protections, leading to local...

MAL-2023-1452 Malicious code in syns-knox-xss-allwhere (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3c6b6e1a22a56620b309d722c59897f1e6d2225c56e8faafc1b87beefc26750 The OpenSSF Package Analysis project identified 'syns-knox-xss-allwhere' @ 1.0.0 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1450 Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

CVE-2023-32563

creationtimestamp| type| source ---|---|--- 2023-08-11 00:16:14+00:00| seen| https://t.me/cibsecurity/68260 2023-08-16 19:10:04+00:00| seen| https://t.me/truesecator/4739 2023-09-03 07:06:40+00:00| published-proof-of-concept| https://t.me/CNArsenal/998 2024-10-31 00:00:00+00:00| exploited| The...