Redmine 注入漏洞

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in Redmine versions prior to 4.0.7 and versions prior to 4.1.1.1 in...

CVE-2021-30141

Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...

CVE-2021-24169

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...

CVE-2021-24169

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...

Cross site scripting

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS...

InsightIDR’s Log Search: Recent Enhancements and Upcoming Investments

Log data is critical to ensuring that you have full visibility into what’s going on across your environment. Alongside endpoint and network data, log data enables teams to detect malicious activity, prove compliance, and have better visibility across their environment. Within InsightIDR, our Log...

Automattic WooCommerce 跨站脚本漏洞

Automattic WooCommerce is an open source e-commerce platform based on WordPress from Automattic, Inc. in the United States. A security vulnerability exists in the WooCommerce WordPress plugin Advanced Order Export prior to version 3.1.8. The vulnerability stems from the tab parameter in the admin...

Friendica 安全漏洞

Friendica is an application for the German Friendica community. Provides decentralized social networking. A security vulnerability exists in Friendica version 2021.01 and earlier versions of Module/Settings/UserExport.php, which allows anonymous users to use userexport settings...

Automattic WooCommerce Order Export Cross-Site Scripting Vulnerability

Automattic WooCommerce is the United States Automattic company's set of open source e-commerce platform based on WordPress . A cross-site scripting vulnerability exists in WooCommerce Order Export in versions prior to 3.1.8. The vulnerability stems from the fact that Advanced Order Export allows...

The vulnerability of the “Export” function in the web application for phpMyAdmin’s database administration system allows a hacker to execute arbitrary code.

The vulnerability of the “Export” function in the phpMyAdmin web application for database management involves the absence of a mechanism to neutralize elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by opening a specially crafted CSV file...

CVE-2021-27349

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727...

CVE-2021-27349

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727...

Design/Logic Flaw

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727...

CVE-2021-27349

The CVE-2021-27349 entry concerns the WordPress WooCommerce Order Export (Advanced Order Export) plugin vulnerable to Cross-Site Scripting (XSS) in versions before 3.1.8. Multiple connected sources (CNVD-2021-27800, CNVD-2020-27077, NVD CVE-2021-27349 entry) describe XSS in this plugin; CNVD note...

PT-2021-17407 · Woocommerce · Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce Advanced Order Export versions prior to 3.1.8 Description: The issue allows for XSS. Recommendations: For versions prior to 3.1.8, update to version 3.1.8 or later to resolve the issue...

Automattic WooCommerce Order Export 跨站脚本漏洞

Automattic WooCommerce is the United States Automattic company's set of open source e-commerce platform based on WordPress . A cross-site scripting vulnerability exists in WooCommerce Order Export in versions prior to 3.1.8. The vulnerability stems from the fact that Advanced Order Export allows...

Windows Gather Exchange Server Mailboxes

This module will gather information from an on-premise Exchange Server running on the target machine. Two actions are supported: LIST default action: List basic information about all Exchange servers and mailboxes hosted on the target. EXPORT: Export and download a chosen mailbox in the form of a...

CVE-2021-3119

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipherexport in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command...

HackerOne: CSV injection in the credentials export

Summary: Hello team! We have found out that a hacker can inject malicious excel formulas into the credentials details which will be executed when program user exports the credentials details via https://hackerone.com/hackeroneh1pbbp3/credentials - export credentials and opens this CSV using MS...

CVE-2021-27221

MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...