Microsoft Windows Storage Services 后置链接漏洞

Microsoft Windows Storage Services is a storage service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Storage Services. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 18...

Microsoft PC Manager 后置链接漏洞

Microsoft PC Manager is a computer management software from Microsoft USA that allows one-click acceleration, system space management, pop-up window management, and full health check. Microsoft PC Manager suffers from a backlink vulnerability. An attacker can exploit this vulnerability to elevate...

Microsoft Windows Deployment Services 后置链接漏洞

Microsoft Windows Deployment Services is a setup container for Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS from Microsoft Corporation USA, which can be used to set up new computers via unattended network-based installations. A backlink...

Microsoft Azure 后置链接漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Azure. An attacker can elevate privileges by exploiting this vulnerability...

CVE-2024-29907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

Parallels Desktop 后置链接漏洞

Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. Parallels Desktop suffers from a backlink vulnerability that stems from an issue in the Technical Data Reporter component, whereby the service can be abused to change the permissions of...

Apple iOS和iPadOS 后置链接漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A backlink vulnerability exists in Apple iOS version 18.3 and iPadOS version 18.3, which stems from the fact that restorin...

Microsoft Windows Event Tracing 后置链接漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit this...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

WordPress Backlink Monitoring Manager plugin <= 0.1.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Backlink Monitoring Manager versions = 0.1.3...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714

CVE-2024-12714 concerns the Backlink Monitoring Manager WordPress plugin (up to version 0.1.3). The issue is a Reflected Cross-Site Scripting caused by not sanitising/escaping a parameter before output. This could affect high-privilege users such as admins. The WordFence record indicates the vuln...

CVE-2024-12714 Backlink Monitoring Manager <= 0.1.3 - Reflected XSS

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Backlink Monitoring Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-1936 · WordPress · Backlink Monitoring Manager

Name of the Vulnerable Software and Affected Versions: Backlink Monitoring Manager WordPress plugin versions 0.1.3 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Panda Security Spain. Panda Security Dome suffers from a back-link vulnerability. An attacker exploiting this vulnerability could elevate privileges and execute arbitrary code in a SYSTEM environment...

AnyDesk 后置链接漏洞

AnyDesk is a remote desktop connection software from AnyDesk, a German company. AnyDesk suffers from a backlink vulnerability that originates from a flaw in the background image processing, which can be exploited by a local attacker to read arbitrary files and disclose sensitive information...

Wacom Center 后置链接漏洞

Wacom Center is a driver from Wacom USA. A backlink vulnerability exists in Wacom Center that stems from the presence of a local elevation of privilege vulnerability that allows a local attacker to elevate privileges and execute arbitrary code in the SYSTEM context...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...