6584 matches found
WordPress Easy Google Maps plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Easy Google Maps plugin version 1.11.7 and earlier versions. The vulnerability stem...
CVE-2023-33198 Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
tgstation-server is a production scale tool for BYOND server management. The DreamMaker API DMAPI chat channel cache can possibly be poisoned by a tgstation-server TGS restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the...
CVE-2023-33198
tgstation-server is a production scale tool for BYOND server management. The DreamMaker API DMAPI chat channel cache can possibly be poisoned by a tgstation-server TGS restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the...
CVE-2023-33198: Incorrectly Specified Destination in a Communication Channel
tgstation-server is a production scale tool for BYOND server management. The DreamMaker API DMAPI chat channel cache can possibly be poisoned by a tgstation-server TGS restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the...
WordPress plugin Easy Google Maps has a cross-site request forgeing vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Easy Google Maps plugin version 1.11.7 and earlier versions. The vulnerability stem...
OSEC-2023-01 Time of check time of use issue in opam's cache
Bug description Opam uses since version 2.0.0 a download cache: if a source artifact is needed, first its hash is looked up in the local cache /.opam/download-cache//. Opam supports multiple hash algorithms, a cache lookup tries all hash algorithms present in the opam file. Before opam 2.1.5, the...
PT-2023-36623
Bug description Opam uses since version 2.0.0 a download cache: if a source artifact is needed, first its hash is looked up in the local cache /.opam/download-cache//. Opam supports multiple hash algorithms, a cache lookup tries all hash algorithms present in the opam file. Before opam 2.1.5, the...
Exploit for HTTP Request Smuggling in Apache Http_Server
CVE 2023 25690 - Proof of Concept Published: 7 March 2023...
Security Bulletin: Open Source Dependency Vulnerability
Summary IBM Edge Application Manager 4.5 has resolved the vulnerability. Vulnerability Details IBM X-Force ID: 239925 DESCRIPTION: Apollo GraphQL Apollo Server is vulnerable to web cache poisoning, caused by improper handling of cache-control response header. By modifying HTTP request headers, an...
CVE-2023-26125
A flaw was found in Gin-Gonic Gin. This flaw allows a remote attacker to bypass security restrictions caused by improper input validation. An attacker can perform cache poisoning attacks by sending a specially-crafted request using the X-Forwarded-Prefix header. Mitigation Mitigation for this iss...
LavaLite vulnerable to web cache poisoning
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
GHSA-6VCF-CFJP-QXCW LavaLite vulnerable to web cache poisoning
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
CVE-2023-27238
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
Design/Logic Flaw
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
CVE-2023-27238
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
LavaLite security vulnerabilities
LavaLite is an open source lightweight content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0 that stems from vulnerability to network cache poisoning...
CVE-2023-27238
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
CVE-2023-27238
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning...
PT-2023-21021
Name of the Vulnerable Software and Affected Versions LavaLite CMS version 9.0.0 Description The issue is related to web cache poisoning. Recommendations For LavaLite CMS version 9.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...