5347 matches found
CVE-2022-24682
creationtimestamp| type| source ---|---|--- 2022-02-09 07:12:32+00:00| exploited| https://t.me/cibsecurity/37046 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:26:45+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971267 2025-01-30 01:12:15+00:0...
CVE-2022-20708
creationtimestamp| type| source ---|---|--- 2022-02-04 11:26:32+00:00| published-proof-of-concept| https://t.me/truesecator/2591 2022-02-05 15:10:07+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1769 2022-02-10 20:17:10+00:00| seen| https://t.me/cibsecurity/37235 2022-04-05...
CVE-2022-20701
creationtimestamp| type| source ---|---|--- 2022-02-04 11:26:32+00:00| published-proof-of-concept| https://t.me/truesecator/2591 2022-02-05 15:10:07+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1769 2022-02-10 20:16:59+00:00| seen| https://t.me/cibsecurity/37229 2023-06-14...
CVE-2022-20699
creationtimestamp| type| source ---|---|--- 2022-02-04 11:26:32+00:00| published-proof-of-concept| https://t.me/truesecator/2591 2022-02-05 15:10:07+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1769 2022-02-10 20:17:11+00:00| seen| https://t.me/cibsecurity/37236 2022-02-11...
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
The plugin does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting PoC...
Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting
The plugin does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...
WordPress Product Feed PRO for WooCommerce plugin <= 11.2.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Product Feed PRO for WooCommerce plugin versions = 11.2.1. Solution Update the WordPress Product Feed PRO for WooCommerce plugin to the latest available version at least 11.2.2...
Oracle prices could be not fresh
Handle 0x1f8b Vulnerability details Impact Unsafe oracle call. Proof of Concept The contract Cvx3CrvOracle doesn't check that the data is fress, it call the method latestRoundData, this method allow you to run some extra validations, but these validations were not made. According to the chain.lin...
CVE-2021-22600
creationtimestamp| type| source ---|---|--- 2022-01-26 16:19:36+00:00| seen| https://t.me/cibsecurity/36304 2022-05-05 21:09:50+00:00| exploited| https://t.me/cKure/9471 2022-05-06 11:37:55+00:00| exploited| https://t.me/truesecator/2920 2022-05-06 13:39:38+00:00| exploited|...
WordPress Product Feed PRO for WooCommerce plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. cross-site request forgery vulnerability exists in versions prior to 11.0.7 of the Product Feed PRO for...
CVE-2021-24974
The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue which will be triggered in the admin dashboard due to th...
CVE-2021-24974
The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue which will be triggered in the admin dashboard due to th...
CVE-2021-24974
The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue which will be triggered in the admin dashboard due to th...
Cross site scripting
The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue which will be triggered in the admin dashboard due to th...
CVE-2021-24974
The CVE applies to WordPress Product Feed PRO for WooCommerce plugin prior to 11.0.7. Root cause is missing authorization and CSRF checks in several AJAX actions, enabling stored XSS that can be triggered in the admin dashboard by authenticated users. Affected component: Product Feed PRO for WooC...
WordPress plugin 跨站脚本漏洞
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. cross-site request forgery vulnerability exists in versions prior to 11.0.7 of the Product Feed PRO for...
UBUNTU-CVE-2022-0093
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...
CVE-2022-0093
GitLab CVE-2022-0093 affects GitLab versions prior to 14.4.5 and ranges 14.5.0–14.5.3 and 14.6.0–14.6.1. Root cause: a user with an expired password could access sensitive information via RSS feeds. Impact: partial confidentiality exposure without indicated integrity/availability effects in the p...