Microsoft Azure backend link vulnerability

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Azure. An attacker can elevate privileges by exploiting this vulnerability...

CVE-2024-29907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

Parallels Desktop Postback Link Vulnerability

Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. Parallels Desktop suffers from a backlink vulnerability that stems from an issue in the Technical Data Reporter component, whereby the service can be abused to change the permissions of...

Apple iOS and iPadOS backend link vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A backlink vulnerability exists in Apple iOS version 18.3 and iPadOS version 18.3, which stems from the fact that restorin...

Microsoft Windows Installer backend link vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Event Tracing Backlink Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit this...

WordPress Backlink Monitoring Manager plugin <= 0.1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Backlink Monitoring Manager versions = 0.1.3...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin (through version 0.1.3 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape a parameter before outputting it back to the page. This vulnerability could be exploited against high-privilege us...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-1936 · WordPress · Backlink Monitoring Manager

Name of the Vulnerable Software and Affected Versions: Backlink Monitoring Manager WordPress plugin versions 0.1.3 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

WordPress plugin Backlink Monitoring Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-12714: Improper Neutralization of Input During Web Page Generation

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

AnyDesk backend link vulnerability

AnyDesk is a remote desktop connection software from AnyDesk, a German company. AnyDesk suffers from a backlink vulnerability that originates from a flaw in the background image processing, which can be exploited by a local attacker to read arbitrary files and disclose sensitive information...

Panda Security Dome backend link vulnerability

Panda Security Dome is an antivirus product for ransomware and spyware from Panda Security Spain. Panda Security Dome suffers from a back-link vulnerability. An attacker exploiting this vulnerability could elevate privileges and execute arbitrary code in a SYSTEM environment...

Wacom Center Postback Link Vulnerability

Wacom Center is a driver from Wacom USA. A backlink vulnerability exists in Wacom Center that stems from the presence of a local elevation of privilege vulnerability that allows a local attacker to elevate privileges and execute arbitrary code in the SYSTEM context...

QNAP Systems Qsync Central backend link vulnerability

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...

SUSE Manager post-link vulnerability

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration and monitoring. SUSE Manager suffers from a back-link vulnerability that originates from an attacker who is allowed to create a specially crafted git...

F-Secure Total post-installation link vulnerability

F-Secure Total is an online protection program from Finnish company Fen Security F-Secure. F-Secure Total suffers from a backlink vulnerability that stems from improper handling of symbolic links in the WithSecure plugin hosting service, which could allow a local attacker to leverage administrato...