2341 matches found
PT-2022-15852 · WordPress · Find/Replace All
Name of the Vulnerable Software and Affected Versions: Find and Replace All WordPress plugin versions prior to 1.3 Description: The issue arises from the plugin not sanitizing and escaping some parameters from its setting page before outputting them back to the user, leading to a Reflected...
CVE-2022-2311: Undefined Security Weakness
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-3850: Undefined Security Weakness
The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack...
The vulnerability of the Dict::find() function in the Dict.cc component of the Poppler PDF handling library allows a attacker to cause a service failure.
The vulnerability of the Dict::find function in the Dict.cc component of the Poppler PDF handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created PDF file...
PT-2025-18563
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2 Description A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write of...
find-taxi.co.uk Cross Site Scripting vulnerability OBB-3040571
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Find and Replace All plugin <= 1.3 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary Replacement discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress Find and Replace All plugin versions = 1.3. Solution No patched version available...
WordPress Find and Replace All plugin <= 1.2 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by Vinay Varma Mudunuri and Krishna Harsha Kondaveeti in WordPress Find and Replace All plugin versions = 1.2. Solution Update the WordPress Find and Replace All plugin to the latest available version at least 1.3...
Find and Replace All < 1.3 - Reflected Cross Site Scripting
The plugin does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue...
PT-2022-7232 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to inadequate access control in the Find My function of the macOS operating system, which may allow an attacker to disclose protected information. It was addressed with improved...
PT-2022-5924
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A vulnerability was found in the Linux Kernel, affecting the function find prog by sec insn of the file tools/lib/bpf/libbpf.c of the component BPF. The manipulation leads to null pointe...
If L1GraphTokenGateway's outboundTransfer is called by a contract, the entire msg.value is blackholed, whether the ticket got redeemed or not.
Lines of code Vulnerability details The outboundTransfer function in L1GraphTokenGateway is used to transfer user's Graph tokens to L2. To do that it eventually calls the standard Arbitrum Inbox's createRetryableTicket. The issue is that it passes caller's address in the submissionRefundAddress a...
Denial of Service (DoS)
Overview fatfreecrm is a customer relationship management platform. Affected versions of this package are vulnerable to Denial of Service DoS in the findallgrouped function in models/polymorphic/task.rb, by users with bucket access. Details Denial of Service DoS describes a family of attacks, all...
PT-2022-34786
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.19.11 Description The issue is related to a possible bogus match in the nf osf find function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-34823
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.71 Description The issue is related to a possible bogus match in the nf osf find function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...
Open5GS Denial of Service Vulnerability (CNVD-2025-18589)
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which originates from the amfgnbfindbyaddr function in /src/amf/amf-context.c that only detects the Ip address and does not detect if it i...
PersistenceSniper - Powershell Script That Can Be Used By Blue Teams, Incident Responders And System Administrators To Hunt Persistences Implanted In Windows Machines
PersistenceSniper is a Powershell script that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. The script is also available on Powershell Gallery. --- The Why Why writing such a tool, you might ask. Well, for starters, I...
CVE-2022-36878
Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...
