CVE-2023-27419 WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...

CVE-2023-27419

CVE-2023-27419 affects the WordPress Viable Blog theme ( 1.1.4 when available; monitor for a confirmed fixed release. If upgrading is not immediately possible, monitor vendor advisories for a confirmed patch. The vulnerability is unpatched/not publicly fixed in the supplied sources.

PT-2023-21107 · Unknown · Everest Themes Viable Blog Theme

Name of the Vulnerable Software and Affected Versions: Everest themes Viable Blog theme versions = 1.1.4 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Everest News Type Theme Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27421 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c15b03e345f4 Credits László Radnai Required...

GSD-2023-1000612 ARM: dts: aspeed: rainier,everest: Move reserved memory regions

ARM: dts: aspeed: rainier,everest: Move reserved memory regions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

Path traversal

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

CVE-2022-39959

CVE-2022-39959 – Panini Everest Engine 2.0.4 : A privilege-escalation flaw arising from an unprivileged user being able to create a file named Everest.exe in %PROGRAMDATA%\Panini. The service running as SYSTEM uses the unquoted path %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe, which can...

CVE-2022-39959

Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a...

Panini Everest Engine 代码问题漏洞

Panini Everest Engine is a Windows service driver from Panini Corporation. A security vulnerability exists in Panini Everest Engine version 2.0.4 that originates from allowing an unprivileged user to create a file named Everest.exe in the %PROGRAMDATA%Panini folder, which can be exploited by an...

PT-2022-25146 · Panini · Panini Everest Engine

Name of the Vulnerable Software and Affected Versions: Panini Everest Engine version 2.0.4 Description: The issue allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%Panini folder, leading to privilege escalation. A service running as SYSTEM uses the unquoted path of...

everest-construction.co.uk Cross Site Scripting vulnerability OBB-2775863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

everestmedicalgroup.com Cross Site Scripting vulnerability OBB-2737419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in everest-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf5d08f81a8f2c17042f4d380e1b453cce7a49d9d7da863da126e8b4522be1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2897 Malicious code in everest-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf5d08f81a8f2c17042f4d380e1b453cce7a49d9d7da863da126e8b4522be1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Emails Blacklist for Everest Forms plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Emails Blacklist for Everest Forms plugin versions = 1.0.1. Solution Update the WordPress Emails Blacklist for Everest Forms plugin to the latest available version at least 1.0.2...

WordPress Emails Blacklist for Everest Forms plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Emails Blacklist for Everest Forms plugin versions = 1.0.1. Solution Update the WordPress Emails Blacklist for Everest Forms plugin to the latest available version at least 1.0.2...

everestmedicalgroup.com Cross Site Scripting vulnerability OBB-2378188

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...