Lucene search
+L

338 matches found

Malwarebytes
Malwarebytes
•added 2024/01/26 5:05 p.m.•25 views

Ring curtails law enforcement’s access to footage

US law enforcement will no longer be able to request footage through the Neighbors app produced by Ring video doorbells and surveillance cameras. Until now Ring’s Request for Assistance RFA function allowed law enforcement to ask for and obtain user footage, but this function will be retired. Alo...

7.1AI score
SaveExploits0
OSV
OSV
•added 2023/11/30 1:15 p.m.•15 views

CVE-2023-6137

Cross-Site Request Forgery CSRF vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1...

8.8CVSS7.3AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/30 1:15 p.m.•25 views

CVE-2023-6137

Cross-Site Request Forgery CSRF vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1...

8.8CVSS0.00254EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/30 1:15 p.m.•17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1...

6.8CVSS7.2AI score0.00254EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/30 12:50 p.m.•39 views

CVE-2023-6137 WordPress Frontier Post Plugin <= 6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1...

5.4CVSS8.9AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/30 12:50 p.m.•90 views

CVE-2023-6137

Summary: CVE-2023-6137 affects the Frontier Post WordPress plugin (versions

8.8CVSS8.5AI score0.00254EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•11 views

WordPress Plugin Frontier Post Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•4 views

CVE-2023-6137: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in finnj Frontier Post allows Cross Site Request Forgery.This issue affects Frontier Post: from n/a through 6.1...

8.8CVSS7.8AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•15 views

PT-2023-32540 · Unknown · Finnj Frontier Post

Name of the Vulnerable Software and Affected Versions: finnj Frontier Post versions n/a through 6.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker...

8.8CVSS8.8AI score0.00254EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
•added 2023/11/28 12:00 a.m.•14 views

Frontier Post <= 6.1 - Cross-Site Request Forgery

Description The Frontier Post plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.1. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unauthorized action...

8.8CVSS6.6AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2023/11/23 12:00 a.m.•20 views

WordPress Frontier Post Plugin <= 6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Frontier Post Type Plugin Vulnerable versions = 6.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-6137 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4932c24e3570 Credits Nguyen Xuan Chien Required...

8.8CVSS7AI score0.00254EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/10/13 1:15 p.m.•26 views

CVE-2023-45130

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

7.5CVSS7.5AI score0.00893EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/13 1:15 p.m.•23 views

Design/Logic Flaw

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

5CVSS7.5AI score0.00893EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/10/13 12:14 p.m.•32 views

CVE-2023-45130 Frontier opcode SUICIDE touches too many storage values on large contracts

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

7.5CVSS7.7AI score0.00893EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/13 12:14 p.m.•95 views

CVE-2023-45130

Frontier (Substrate’s Ethereum compatibility layer) has a CVE-2023-45130 issue where, prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, invoking opcode SUICIDE on a contract that has large storage can trigger a single IO call across the WebAssembly boundary to remove all storages, potenti...

7.5CVSS7.5AI score0.00893EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/13 12:14 p.m.•18 views

CVE-2023-45130 Frontier opcode SUICIDE touches too many storage values on large contracts

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

7.5CVSS7.5AI score0.00893EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/13 12:14 p.m.•26 views

CVE-2023-45130 Frontier opcode SUICIDE touches too many storage values on large contracts

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

7.5CVSS7.4AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2023/10/13 12:00 a.m.•12 views

Frontier Security Vulnerabilities

Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ether Dapps. A security vulnerability exists in previous versions of Frontier aea52819, which stems from a vulnerability that allows an attacker to create contracts with a large number of stored values on a parallel...

7.5CVSS6.6AI score0.00893EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/13 12:00 a.m.•4 views

CVE-2023-45130: Allocation of Resources Without Limits or Throttling

Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses storage::removeprefix now renamed to storage::clearprefix to remove all storage...

7.5CVSS7.1AI score0.00893EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2023/10/02 3:00 a.m.•31 views

Food delivery robots give captured video footage to police

In what sounds like a new step towards Skynet, footage from a food delivery robot has been used as part of a criminal investigation. As 404 Media reports, the food delivery robots that are deployed for Uber Eats in Los Angeles are operated by Serve Robotics, which ultimately wants to deploy up to...

7AI score
SaveExploits0
Rows per page
Query Builder