5812 matches found
PT-2022-21540 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to Ventura 13 watchOS versions prior to 9 Description: A logic issue was addressed with improved state management. This issue allows a user with physical access to a device to potentially use Siri...
Hospital Management System 跨站脚本漏洞
Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v4.0 contains a cross-site scripting vulnerability that originates in the view-patient .php and...
RelatedChat 安全漏洞
RelatedChat is an open source alternative communication platform for Related Code individual developers. A security vulnerability exists in RelatedChat. An attacker exploiting this vulnerability could access the chat history of any user of the application...
Easy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRF
The plugin does not have CSRF check in place when deleting payment history, and does not ensure that the post to be deleted is actually a payment history. As a result, attackers could make a logged in admin delete arbitrary post via a CSRF attack PoC...
SteaLinG - Open-Source Penetration Testing Framework Designed For Social Engineering
The SteaLinG is an open-source penetration testing framework designed for social engineering After the hack, you can upload it to the victim's device and run it disclaimers: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal...
PT-2022-6662 · Ampere +4 · Ampereone +4
Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified AmpereOne hardware affected versions not specified Description: A known cache speculation issue, similar to Spectre v2, allows malicious code to influence mispredicted branches within a victim's hardware...
GHSA-6263-X97C-C4GG matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Impact An attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be missing in others. This attack is possible due to the matrix-js-sdk implementing a too...
Security Bulletin: TADDM Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell
PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections. Additionally, this tool...
CVE-2022-38704
Cross-Site Request Forgery CSRF vulnerability in SEO Redirection plugin = 8.9 at WordPress, leading to deletion of 404 errors and redirection history...
CVE-2022-38704
Summary (CVE-2022-38704) : A CSRF vulnerability exists in the WordPress SEO Redirection plugin versions = 9.1 as a fix, or apply the provided workaround (restrict plugin settings access) where applicable. Monitor for updates from the listed advisories.
CVE-2022-37328
Authenticated author+ Stored Cross-Site Scripting XSS vulnerability in Themes Awesome History Timeline plugin = 1.0.5 at WordPress...
CVE-2022-37328 WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated author+ Stored Cross-Site Scripting XSS vulnerability in Themes Awesome History Timeline plugin = 1.0.5 at WordPress...
CVE-2022-37328
The CVE-2022-37328 entry concerns the WordPress plugin Themes Awesome History Timeline (versions
WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to deletion of 404 errors and redirection history was discovered by Muhammad Daffa Patchstack Alliance in the WordPress SEO Redirection plugin versions = 8.9. Solution Update the WordPress SEO Redirection plugin to the latest available version...
SEO Redirection < 9.1 - 404 Error & History Deletion via CSRF
The plugin does not have CSRF check when deleting 404 errors and history, which could allow attackers to make logged in admins delete them via CSRF attacks...
WordPress plugin Themes Awesome History Timeline 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Dataprobe iBoot-PDU 访问控制错误漏洞
The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in the Dataprobe iBoot-PDU FW that originates from an unauthenticated user being able to open the PHP index page and download a history file from the device...
Genesys PureConnect Cross Site Scripting
Product: Genesys PureConnect - Interaction Web Tools Chat Service Description: Interaction Web Tools Chat Service allows XSS within the Printable Chat History via the participant - name JSON POST parameter. Vulnerability Type: XSS Vendor of Product: Genesys PureConnect Affected Product Code Base:...