CVE-2022-36112

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to SSRF exploit. Server-side requests ca...

CVE-2022-36112

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to SSRF exploit. Server-side requests ca...

CVE-2022-36112 Blind Server-Side Request Forgery (SSRF) in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in planning is subject to SSRF exploit. Server-side requests ca...

About the security content of macOS Big Sur 11.7

About the security content of macOS Big Sur 11.7 This document describes the security content of macOS Big Sur 11.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

CVE-2022-38067

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

Arbitrary file deletion

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability

Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...

CVE-2022-38067

CVE-2022-38067 affects the WordPress plugin Totalsoft Event Calendar – Calendar (versions

PT-2022-24182 · Totalsoft · Totalsoft Event Calendar

Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue concerns an Unauthenticated Event Deletion vulnerability. Recommendations: For versions 1.4.6 and earlier, update to a version later than 1.4.6 to...

WordPress plugin Totalsoft Event Calendar – Calendar 权限许可和访问控制问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Totalsoft Event...

CVE-2022-33177

Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...

CVE-2022-33177

Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...

CVE-2022-33177

CVE-2022-33177 concerns WPdevelop/Oplugins Booking Calendar plugin for WordPress (versions

CVE-2022-33177 WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity

Cross-Site Request Forgery CSRF vulnerability in WPdevelop/Oplugins Booking Calendar plugin = 9.2.1 at WordPress leading to Translations Update...

WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) leading to Translations Update

Cross-Site Request Forgery CSRF leading to Translations Update discovered by Muhammad Daffa Patchstack Alliance in WordPress Booking Calendar plugin versions = 9.2.1. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 9.2.2...

PT-2022-21726 · WordPress · Wpdevelop/Oplugins Booking Calendar

Name of the Vulnerable Software and Affected Versions: WPdevelop/Oplugins Booking Calendar plugin versions prior to 9.2.1 Description: A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions related to Translations Update. Recommendations: For WPdevelop/Oplugins Booking...

WordPress plugin WPdevelop/Oplugins Booking Calendar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...