CVE-2022-4905 UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setupwizardinterface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The...

CVE-2022-4905: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setupwizardinterface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The...

xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs...

CVE-2023-0732: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument...

[SECURITY] Fedora 36 Update: python-jupyter-core-4.9.1-3.fc36

Core common functionality of Jupyter projects. This package contains base application classes and configuration inherited by other projects...

OSV-2023-35 Heap-buffer-overflow in parse_classes_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55451 Crash type: Heap-buffer-overflow READ 4 Crash state: parseclasses64 classes rbinobjectsetitems...

3 Lifehacks While Analyzing Orcus RAT in a Malware Sandbox

Orcus is a Remote Access Trojan with some distinctive characteristics. The RAT allows attackers to create plugins and offers a robust core feature set that makes it quite a dangerous malicious program in its class. RAT is quite a stable type that always makes it to the top. --- ANY.RUN's top...

The vulnerability of the scsi_ioctl function (drivers/scsi/scsi_ioctl.c) in the Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the improper handling of SCSI device classes during SCSI command authorization. Exploiting this vulnerability can allow an attacker to enhance their privileges...

GSD-2023-1001233 net: sched: disallow noqueue for qdisc classes

net: sched: disallow noqueue for qdisc classes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

PT-2023-34310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the Linux Kernel's network scheduling. It disallows the noqueue option for qdisc classes. The actual impact and attack plausibility have not yet been proven...

PT-2023-33939

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.88 Description The issue is related to the Linux Kernel's network scheduling. It disallows the noqueue option for qdisc classes. The actual impact and attack plausibility have not yet been proven...

CVE-2018-25076

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...

Contextual Related Posts < 3.3.1 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks 1. Insert a "Contextual Related Posts" block, and give ...

CVE-2018-25076: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...

PT-2023-10817 · Bigtree · Events Extension

Name of the Vulnerable Software and Affected Versions: Events Extension on BigTree affected versions not specified Description: A critical issue was found in the Events Extension, affecting the getRandomFeaturedEventByDate, getUpcomingFeaturedEventsInCategoriesWithSubcategories, recacheEvent, and...

CVE-2021-4312

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zipgo of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. Th...

CVE-2022-46947: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

CVE-2021-4312: Improper Neutralization of Input During Web Page Generation

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zipgo of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. Th...

CVE-2022-46946: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...