CVE-2022-31054

Argo Events (Kubernetes) prior to v1.7.1 is affected by a DoS due to several HandleRoute endpoints using deprecated ioutil.ReadAll(), which can exhaust memory on large requests. The issue affects the Argo Events server and can crash the service, with the publicly released fix in version 1.7.1. Co...

CVE-2022-31054 Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server wil...

CVE-2022-31054 Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

Argo Events is an event-driven workflow automation framework for Kubernetes. Prior to version 1.7.1, several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server wil...

Argo 缓冲区错误漏洞

Argo is an open source container native workflow engine. A buffer error vulnerability in Kubernetes Argo Events prior to version 1.7.1, which stems from ioutil.ReadAll reading all data into memory, can be exploited by an attacker to send a large number of requests to the Argo Events server,...

Wordpress Modern Events Calendar Lite plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in the Wordpress Modern Events Calendar Lite plugin, which stems...

CVE-2022-32250

creationtimestamp| type| source ---|---|--- 2022-06-03 00:25:55+00:00| seen| https://t.me/cibsecurity/43781 2022-07-06 16:33:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2655 2022-08-25 07:18:28+00:00| published-proof-of-concept| https://t.me/proxybar/945 2022-08-25...

Users unable to launch - Error: "Cannot complete your request"

'Cannot complete your request' while trying to access the Web Store URL. StoreFront events show that a loopback communication failed...

CVE-2022-30818

Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blogeventsedit.php?id=31...

CVE-2022-30823

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...

CVE-2022-30818

Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blogeventsedit.php?id=31...

CVE-2022-30823

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...

Sql injection

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blogeventsedit.php...

CVE-2022-30127

creationtimestamp| type| source ---|---|--- 2022-06-02 00:24:57+00:00| seen| https://t.me/cibsecurity/43627 2022-06-02 01:23:36+00:00| seen| https://t.me/cibsecurity/43625...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from /Wedding-Management/admin/ blogeventsedit.php?id=31 page lacks validation of external input SQL statements, which can ...

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/logeventsedit.php page Lack of validation of external input SQL statements can be...

CVE-2014-0226

creationtimestamp| type| source ---|---|--- 2022-06-01 15:53:21+00:00| seen| Telegram/oy0dbBE7nfsKRAHLSCKnQ1rQ2k7lu2BiCitRs7pe50X7S8 2023-11-28 15:17:13+00:00| seen| https://t.me/arpsyndicate/663...

WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting

Overview WordPress Plugin "Modern Events Calendar Lite" provided by Webnus contains a stored cross-site scripting vulnerability CWE-79. Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#04155116: WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting

WordPress Plugin "Modern Events Calendar Lite" provided by Webnus contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the website using the plugin. Solution Update the plugin Update the plugin to t...

Modern Events Calendar Lite < 6.3.0 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow low privilege users to perform Stored Cross-Site Scripting attacks...

WordPress Modern Events Calendar Lite plugin < 6.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Tsutomu Aramaki Mitsui Bussan Secure Directions, Inc in WordPress Modern Events Calendar Lite plugin versions 6.3.0. Solution Fixed in version 6.3.0, but the plugin is closed. This plugin has been closed as of May 11, 2022...