CVE-2022-0681

The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack...

PrimeKey SignServer 跨站脚本漏洞

PrimeKey SignServer is a multifunctional digital signature software from PrimeKey Sweden. Various digital signature use cases and formats are supported. A cross-site scripting vulnerability exists in the Admin web interface of PrimeKey SignServer prior to version 5.8.1. Exploitation of this...

Possibility for Denial of Service by overwriting PHP files with language exports

Impact Laravel Translation Manager didn't check the locale name, which allowed directory traversal when exporting files. The content would be a PHP file returning an array of translations, but this could lead to unexpected results, like denial of service. Access to the Laravel Translation Manager...

GHSA-3FVF-2GP4-89WQ Possibility for Denial of Service by overwriting PHP files with language exports

Impact Laravel Translation Manager didn't check the locale name, which allowed directory traversal when exporting files. The content would be a PHP file returning an array of translations, but this could lead to unexpected results, like denial of service. Access to the Laravel Translation Manager...

Cross site scripting

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the maliciou...

PT-2022-13066

Name of the Vulnerable Software and Affected Versions Contact Form Submissions WordPress plugin versions prior to 1.7.3 Description The issue allows an unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing a malicious submission, due to the plugin not sanitizing...

PT-2022-13185

Name of the Vulnerable Software and Affected Versions The Catch Themes Demo Import WordPress plugin versions prior to 2.1.1 Description The issue allows high privilege admins to upload arbitrary PHP files, potentially leading to remote code execution RCE, even when the blog is hardened with...

CVE-2022-26521

CVE-2022-26521 affects AbanteCart up to version 1.3.2. The issue allows remote authenticated administrators to execute arbitrary code by uploading an executable file because the Catalog → Media Manager → Images settings can be altered to treat PHP as a valid image file type. The root cause is the...

CVE-2021-25081

The Maps Plugin using Google Maps for WordPress plugin before 1.8.4 does not have CSRF checks in most of its AJAX actions, which could allow attackers to make logged in admins delete arbitrary posts and update the plugin's settings via a CSRF attack...

CVE-2022-26149

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator...

PT-2022-12955 · Palo Alto Networks · Cortex Xsoar

Name of the Vulnerable Software and Affected Versions: Palo Alto Network Cortex XSOAR versions 6.1.0 Palo Alto Network Cortex XSOAR version 6.2.0 builds earlier than 1958888 Description: A stored cross-site scripting XSS vulnerability in the Palo Alto Network Cortex XSOAR web interface allows an...

Stormshield Network Security 命令注入漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A command injection vulnerability exists in Stormshield Network Security because the product does not effectively restrict command line input data. The vulnerability can b...

Cve-Api 安全漏洞

Cve-Api is an open source repository for the Cve Program that contains the source of the Cve Service Api. A security vulnerability exists in Cve-Api that originates in controller org.controller.js in Cve-Api 1.1.1 prior to 5c50baf3bda28133a3bc90b854765a64fb538304 that allows organization...

CVE-2021-46085

OneBlog = 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority...

Cross site scripting

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against logged in admins viewing the created entry...

CVE-2021-25080: Improper Neutralization of Input During Web Page Generation

The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORWARDED-FOR, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against logged in admins viewing the created entry...

backdoor in withdrawRedundant

Handle cmichel Vulnerability details The Vault.withdrawRedundant has wrong logic that allows the admins to steal the underlying vault token. function withdrawRedundantaddress token, address to external override onlyOwner if token == addresstoken && balance 0 // @audit they can rug users. let's sa...

Depositors are at mercy of admins to get their funds back

Handle cmichel Vulnerability details When depositors want their funds back and there are not enough funds in the vault or the strategy, the aUST in the BaseStrategy needs to be redeemed. This redemption process is asynchronous due to the nature of EthAnchor and requires an admin to redeem the aUS...

Discourse 2.8.x < 2.8.0.beta10 DoS Vulnerability

Discourse is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"...

CVE-2022-21644

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via usersearch.php. In search terms provided by the user were not sanitized and were used directly to construct a sql statement. The only users permitted to search are site admins. Users are...