The vulnerabilities of Microsoft Edge and Google Chrome involve improperly implemented security checks for standard elements, allowing attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of Microsoft Edge and Google Chrome lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of Microsoft Edge and Google Chrome web browsers allows attackers to disclose protected information.

The vulnerability of Microsoft Edge and Google Chrome web browsers’ HTML parsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

CVE-2022-29950

Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the 1 rule name parameter to the Rules page or the 2 subrule name or 3 categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed...

CVE-2022-29950

Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the 1 rule name parameter to the Rules page or the 2 subrule name or 3 categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed...

Code injection

DISPUTED Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the 1 rule name parameter to the Rules page or the 2 subrule name or 3 categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed...

CVE-2022-29950

Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the 1 rule name parameter to the Rules page or the 2 subrule name or 3 categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed...

PT-2022-19930 · Experian · Experian Hunter

Name of the Vulnerable Software and Affected Versions: Experian Hunter version 1.16 Description: The issue allows remote authenticated users to modify assumed-immutable elements. This can be achieved via the rule name parameter to the "Rules page" or the subrule name or categories name parameter ...

WordPress plugin Master Elements SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Master Elements 8.0 and earlier versions are vulnerable to SQL injection, which stems from t...

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises due to the failure to take measures to eliminate special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of Fortinet FortiWLM’s WLAN access point and LAN switch management systems exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 Grid Elements versions 7.0.0 - 10.2.0 that originates from insufficiently cleansed user-supplied data. A remote user can trick a victi...

CVE-2022-0693

The Master Elements WordPress plugin through 8.0 does not validate and escape the metaids parameter of its removepostmetacondition AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL Injection...

CVE-2022-0693

The Master Elements WordPress plugin through 8.0 does not validate and escape the metaids parameter of its removepostmetacondition AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL Injection...

CVE-2022-0693

The Master Elements WordPress plugin through 8.0 does not validate and escape the metaids parameter of its removepostmetacondition AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL Injection...

CVE-2022-0693

CVE-2022-0693 affects the WordPress plugin Master Elements (versions = 8.1, which mitigates the SQLi. If exploit details are provided in the connected docs (e.g., PoC, exact payloads), they should be included, but the current documents primarily confirm the vulnerable pattern and the upgrade path.

CVE-2022-0693: Improper Neutralization of Special Elements used in an SQL Command

The Master Elements WordPress plugin through 8.0 does not validate and escape the metaids parameter of its removepostmetacondition AJAX action available to both unauthenticated and authenticated users before using it in a SQL statement, leading to an unauthenticated SQL Injection...

WordPress plugin Master Elements SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Master Elements 8.0 and earlier versions are vulnerable to SQL injection, which stems from t...

PT-2022-13365

Name of the Vulnerable Software and Affected Versions Master Elements WordPress plugin versions prior to 8.0 Description The issue concerns the Master Elements WordPress plugin, which does not properly validate and escape the meta ids parameter of its remove post meta condition AJAX action. This...

PT-2022-28235

Name of the Vulnerable Software and Affected Versions xml2rfc versions prior to 3.12.4 Description The issue allows script elements in SVG sources, which can lead to XSS attacks in HTML output. This impacts websites that publish HTML drafts and RFCs. Recommendations For versions prior to 3.12.4,...

FANUC ROBOGUIDE path traversal vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan.ROBOGUIDE v9.40083.00.05 and earlier versions have a path traversal vulnerability, which originates from an improper restriction of pathnames to restricted directories. An attacker can exploit this vulnerability using special elemen...

The vulnerability of the command-line interface of Cisco’s software-hardware devices, allowing a hacker to execute any command they desire

The vulnerability of the command-line interface of Cisco’s software-hardware devices exists because measures are not taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows an attacker to execute arbitrary commands...