PT-2022-6848 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.7 XWiki Platform versions prior to 15.2RC1 XWiki Platform versions prior to 13.10.6 XWiki Platform versions prior to 14.4 Description: The XWiki Platform has a vulnerability that allows remote code...

WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by ptsfence Patchstack Alliance in WordPress CPO Shortcodes plugin versions = 1.5.0 . Solution Deactivate and delete. This plugin has been closed as of September 14, 2022 and is not available for download. This closure is...

Shopxian CMS 跨站请求伪造漏洞

Shopxian CMS is an open source free website builder system for individual developers in China zhangqiquan. A cross-site request forgery vulnerability exists in Shopxian CMS version 3.0.0. An attacker exploits this vulnerability to delete a specified column via...

CVE-2022-38329

A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing the administrator to perform unintended actions on an affected system. The vulnerability could allow attackers to modify or delete specific content through...

CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-37412

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Galerio & Urda's Better Delete Revision plugin = 1.6.1 at WordPress...

CVE-2022-37412

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Galerio & Urda's Better Delete Revision plugin = 1.6.1 at WordPress...

Cross site scripting

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Galerio & Urda's Better Delete Revision plugin = 1.6.1 at WordPress...

CVE-2022-39844

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

CVE-2022-37412 WordPress Better Delete Revision plugin <= 1.6.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Galerio & Urda's Better Delete Revision plugin = 1.6.1 at WordPress...

CVE-2022-37412

CVE-2022-37412 concerns the WordPress plugin “Better Delete Revision” by Galerio & Urda. Multiple connected sources confirm an authenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting version

CVE-2022-37412 WordPress Better Delete Revision plugin <= 1.6.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Reflected Cross-Site Scripting XSS vulnerability in Galerio & Urda's Better Delete Revision plugin = 1.6.1 at WordPress...

SAMSUNG Kies 安全漏洞

SAMSUNG Kies is an application from the South Korean company Samsung SAMSUNG for data synchronization between devices. The program is mainly used to connect Samsung devices to a computer and supports features such as file management and device updates. A security vulnerability exists in SAMSUNG...

SAMSUNG Smart Switch PC 安全漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. A security vulnerability exists in SAMSUNG Smart Switch PC prior to version 4.3.22083, which stems from an improper validation of its integrity check that could be exploited by a local attacker t...

WordPress plugin Better Delete Revision 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2022-23982 · Galerio & Urda · Better Delete Revision

Name of the Vulnerable Software and Affected Versions: Galerio & Urda's Better Delete Revision plugin version 1.6.1 and earlier Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious...

CVE-2022-38260

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=...

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

PT-2022-24320 · Unknown · Interview Management System

Name of the Vulnerable Software and Affected Versions: Interview Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the /interview/delete.php component, specifically through the action and id parameters. Recommendations: For...