17066 matches found
New Robo-Dialing Campaign Lets Users Prank Call Russian Bureaucrats
By Waqas If you want to prevent Russian officials from performing their government duties, theres a website that can fulfill… This is a post from HackRead.com Read the original post: New Robo-Dialing Campaign Lets Users Prank Call Russian Bureaucrats...
Microsoft DWM Core Library Elevation of Privilege Vulnerability (CNVD-2022-45485)
Microsoft DWM Core Library is the United States Microsoft Microsoft company's Microsoft windows get a core library. An elevation of privilege vulnerability exists in the Microsoft DWM Core Library. The vulnerability arises from an incorrect programmatic call to a high-level native procedure. An...
PT-2022-14030
Name of the Vulnerable Software and Affected Versions JupiterX Core versions = 2.0.6 Description The issue allows an attacker to call any function in the includes/condition/class-condition-manager.php file by sending the desired function to call in the sub action parameter through the AJAX action...
This Hacktivist Site Lets You Prank Call Russian Officials
To protest the war in Ukraine, WasteRussianTime.today auto-dials Russian government officials, connects them to each other, and lets you listen in to their confusion...
WordPress Call Now Buttons plugin跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of the WordPress Call Now Buttons plugin prior ...
CVE-2022-24890
Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moderator can indirectly enable user webcams by granting permissions, if they were enabled before removing the permissions. A patch is available in versions 13.0.5 and 14.0.0. There...
GHSA-9G2J-5685-H44H Apache Ambari SSRF Vulnerability
Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...
CVE-2022-24890: Exposure of Private Personal Information to an Unauthorized Actor
Nextcloud Talk is a video and audio conferencing app for Nextcloud. In versions prior to 13.0.5 and 14.0.0, a call moderator can indirectly enable user webcams by granting permissions, if they were enabled before removing the permissions. A patch is available in versions 13.0.5 and 14.0.0. There...
PT-2022-16961
Name of the Vulnerable Software and Affected Versions Nextcloud Talk versions prior to 13.0.5 Nextcloud Talk versions prior to 14.0.0 Description The issue affects Nextcloud Talk, a video and audio conferencing app for Nextcloud. A call moderator can indirectly enable user webcams by granting...
CVE-2022-1455
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...
Cross site scripting
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...
CVE-2022-1455
The CVE-2022-1455 entry concerns the WordPress Call Now Button plugin prior to version 1.1.2, where a parameter output into a hidden input attribute is not escaped, enabling Reflected Cross-Site Scripting. The vulnerability affects versions before 1.1.2; the root cause is failure to escape user-c...
CVE-2022-1455 Call Now Button < 1.1.2 - Reflected Cross-Site Scripting
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...
ACCEL-PPP Buffer Error Vulnerability
ACCEL-PPP is a high performance Pptp/L2tp/Pppoe/Ipoe server for Linux. A security vulnerability exists in ACCEL-PPP version 1.12.0, which stems from an out-of-bounds read in postmsg when processing callclearrequest...
WordPress plugin “Call Now Button” has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of the WordPress Call Now Buttons plugin prior ...
CVE-2022-1455: Improper Neutralization of Input During Web Page Generation
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...
PT-2022-13899
Name of the Vulnerable Software and Affected Versions Call Now Button WordPress plugin versions prior to 1.1.2 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs when a parameter is not properly escaped before being outputted back in an attribute of a hidden...
PT-2022-11723
Name of the Vulnerable Software and Affected Versions ACCEL-PPP version 1.12.0 Description The issue is related to an out-of-bounds read in the post msg function when processing a call clear request. Recommendations For ACCEL-PPP version 1.12.0, at the moment, there is no information about a newe...
low-level call not validated in lidoVault
Lines of code Vulnerability details Impact In lines 140 and 141 a low-level transfer is performed and first it is reversed and then it is validated with the require if it was done correctly. This can generate many problems, since the transaction may not be carried out and a message may be returne...
Laravel Framework RCE Vulnerability
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in...