9372 matches found
CVE-2022-21142: Authentication Bypass by Spoofing
Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass...
PT-2022-16333
Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.8.75 a-blog cms versions prior to 2.9.40 a-blog cms versions prior to 2.10.44 a-blog cms versions prior to 2.11.42 a-blog cms versions prior to 3.0.1 Description The issue allows a remote authenticated attacker t...
CVE-2022-23916: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows ...
PT-2022-16653
Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.8.75 a-blog cms versions prior to 2.9.40 a-blog cms versions prior to 2.10.44 a-blog cms versions prior to 2.11.42 a-blog cms versions prior to 3.0.1 Description The issue allows a remote authenticated attacker t...
PT-2022-16281
Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.8.75 a-blog cms versions prior to 2.9.40 a-blog cms versions prior to 2.10.44 a-blog cms versions prior to 2.11.42 a-blog cms versions prior to 3.0.1 Description The issue allows a remote authenticated attacker t...
WordPress WP Content Copy Protection
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the server in PHP and MySQL to set up a personal blog site. WordPress plugin is a WordPress open source application plug-in. WordPress WP Content Copy Protection...
Automattic: De-anonymize anonymous tips through the Tumblr blog network
Hey y’all! 👋 Hope all is well! Summary: I noticed that, if you send an anonymous tip through the Tumblr dashboard, you can be de-anonymized through the notes view on the blog network & maybe elsewhere?. Platforms Affected: All platforms, but requires a blog that is served on the blog network. Ste...
Appleple a-blog CMS cross-site scripting vulnerability
Appleple a-blog cms is a content management system CMS from appleple Appleple Japan. A cross-site scripting vulnerability exists in a-blog cms, which originates. The vulnerability exists because user-supplied data is not adequately processed. A remote user can trick a victim into following a...
Appleple a-blog CMS cross-site scripting vulnerability
Appleple a-blog cms is a content management system CMS from appleple Appleple Japan. The a-blog cms suffers from a cross-site scripting vulnerability that exists due to insufficient cleaning of user-supplied data. A remote user can trick a victim into clicking on a specially crafted link and...
Appleple a-blog CMS code injection vulnerability
Appleple a-blog cms is a content management system CMS from appleple Appleple Japan. A code injection vulnerability exists in Appleple a-blog cms, which is vulnerable due to a template injection issue. A remote user can obtain arbitrary files on the server. The vulnerability allows remote attacke...
JVN#14706307: Multiple vulnerabilities in a-blog cms
a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2022-24374 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2| AV:N/AC:M/Au:S/C:N/I:P/A:N| Base Score: 3.5...
Ukraine Cyberattack 2022: Geopolitical Cybersecurity
As geopolitical tensions rise, so does pressure to enhance corporate cyber-resilience...
Friday Squid Blogging: Climate Change Causing “Squid Bloom” along Pacific Coast
The oceans are warmer, which means more squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
ModifiedElephant APT hackers plant incriminating evidence on victims devices
By Waqas ModifiedElephant APT group has been carrying out its malicious activities since 2012 and successfully evading detection for over… This is a post from HackRead.com Read the original post: ModifiedElephant APT hackers plant incriminating evidence on victims devices...
@jatahworx/bhive-core (>=6.2.0-beta.0, <=7.1.0), aext-scripts (>=0.23.1, <=1.0.7) +6 more potentially affected by CVE-2019-15609 via kill-port-process (2.1.0)
kill-port-process NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on kill-port-process and may be impacted: - @jatahworx/bhive-core =6.2.0-beta.0, =0.23.1, =0.0.1, =0.0.1-test.0, =0.0.30, =0.0.29, =0.0.1, =1.5.0 Source cves: CVE-2019-156...
CVE-2022-23626
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions imagecreatefrom and image have not been checked properly. Although PHP issued warnings and the upload function returned false, the original file that could contain a malicious payload was kept on the disk. Use...
Design/Logic Flaw
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions imagecreatefrom and image have not been checked properly. Although PHP issued warnings and the upload function returned false, the original file that could contain a malicious payload was kept on the disk. Use...
CVE-2022-23626
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions "imagecreatefrom" and "image" have not been checked properly. Although PHP issued warnings and the upload function returned "false", the original file that could contain a malicious payload was kept on the dis...
CVE-2022-23626 Insufficient file checks in m1k1o/blog
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions imagecreatefrom and image have not been checked properly. Although PHP issued warnings and the upload function returned false, the original file that could contain a malicious payload was kept on the disk. Use...