CVE-2022-24796

RaspberryMatic WebUI file upload vulnerability allows remote, unauthenticated RCE via shell metacharacters in HTTP query strings. The root cause is missing input validation/sanitization in the upload mechanism. Affected versions are 2.31.25.20180428 through 3.63.7.20220226 (note: exact upper boun...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

Cross site scripting

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136

There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user views the current topology of the device through the management page...

CVE-2022-23136

CVE-2022-23136 describes a stored XSS vulnerability in ZTE ZXHN F680 home gateway. The issue arises from lack of input/output validation in the gateway name, allowing an attacker to modify the gateway name and trigger XSS when users view the topology on the management page. Connected sources corr...

TEM FLEX-1080 和 TEM FLEX-1085 信息泄露漏洞

The TEM FLEX-1080 and TEM FLEX-1085 are both a home WiFi annunciator kit from TEM Brazil. A security vulnerability exists in TEM FLEX-1080 and FLEX-1085 1.6.0, which originates from information disclosure in log.cgi of the component Log Handler...

CVE-2015-10002

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component...

Design/Logic Flaw

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component...

CVE-2015-10002

CVE-2015-10002 affects Kiddoware Kids Place, specifically the Home Button Protection feature. According to the consolidated sources, a vulnerability arises from repeated pressing of the Home Button Protection, leading to a local denial of service. The issue is documented across multiple feeds (NV...

CVE-2015-10002 Kiddoware Kids Place Home Button Protection denial of service

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component...

CVE-2015-10002 Kiddoware Kids Place Home Button Protection denial of service

A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component...

Kiddoware Kids Place 安全漏洞

Kiddoware Kids Place is an application with parental monitoring and child lock features from Kiddoware USA. A security vulnerability exists in the Kiddoware Kids Place Home Button Protection component, which stems from Repeated button presses in Home Button Protection can result in a denial of...

WordPress WP Home Page Menu plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress WP Home Page Menu plugin versions prior to 3.1 contain a cross-site scripting vulnerability that stems from the plugin's failure to...

CVE-2022-0684

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0684

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0684

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-0684

CVE-2022-0684 affects the WordPress plugin “WP Home Page Menu” pre-3.1. The vulnerability stems from insufficient sanitisation/escaping of the plugin’s settings, enabling stored Cross-Site Scripting (XSS) by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. The impact i...

CVE-2022-0684 WP Home Page Menu < 3.1 - Admin+ Stored Cross-Site Scripting

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Samsung One UI Home licensing issue vulnerability

Samsung One UI Home is an official Samsung launcher for Galaxy for Samsung Samsung mobile devices. Used to open applications and adjust components of the home screen, such as widgets and themes, Samsung One UI Home suffers from an authorization issue vulnerability that stems from a lack of...

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress WP Home Page Menu plugin versions prior to 3.1 contain a cross-site scripting vulnerability that stems from the plugin's failure to...