CVE-2020-36333

ThemeGrill Demo Importer prior to 1.6.2 is vulnerable via a reset_wizard_actions hook that allows unauthenticated users to wipe the entire WordPress database. The issue affects versions from 1.3.4 upward and 1.6.1 and below, enabling a full database reset to default state and automatic administra...

CVE-2020-36333

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a resetwizardactions hook...

CVE-2020-36334

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database...

CVE-2020-36334

The CVE affects the WordPress plugin themegrill-demo-importer, with versions before 1.6.3. The vulnerability is cross-site request forgery (CSRF) in the plugin, demonstrated by the ability to wipe the database. Root cause details are not explicitly provided beyond the CSRF issue. Impact, as state...

PT-2021-12011 · Unknown · Themegrill-Demo-Importer

Name of the Vulnerable Software and Affected Versions: themegrill-demo-importer versions prior to 1.6.2 Description: The issue allows unauthorized access to wipe the database due to a lack of authentication requirement in the reset wizard actions hook. Recommendations: For themegrill-demo-importe...

WordPress 插件跨站请求伪造漏洞

WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin themegrill-demo-importer version prior to 1.6.3 suffers from a cross-site request forgery vulnerability, as demonstrated by clearing the database...

WordPress 插件访问控制错误漏洞

WordPress Plugin is an open source application plugin for WordPress. An access control error vulnerability exists in the WordPress plugin themegrill-demo-importer prior to version 1.6.3, which stems from clearing a database without authentication...

Podcast Importer SecondLine < 1.1.5 - Server-Side Request Forgery (SSRF)

The plugin was vulnerable to Server-side request forgery SSRF...

openSUSE Security Update : gimp (openSUSE-2020-2357)

This update for gimp fixes the following issues : Security issue fixed : - CVE-2017-17787: Fixed an out-of-bounds read in the PSP importer bsc1073628. Non-security issue fixed : - Fixed a software crash while importing a PostScript file bsc1178726. This update was imported from the...

WordPress ThemeGrill Demo Importer plugin <= 1.6.2 - Bypass and Database Wipe vulnerability

Bypass and Database Wipe vulnerability discovered by Dave Patchstack in WordPress ThemeGrill Demo Importer plugin versions = 1.6.2. Solution Update the WordPress ThemeGrill Demo Importer plugin to the latest available version at least 1.6.3...

CVE-2020-26121

An issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker can import a file even when the target page is protected against "page creation" and the attacker should not be able to create it. This occurs because of a mishandled distinction between an upload...

VulnCheck KEV: CVE-2015-2067

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-38683)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.0, which stems from...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

VyOS Configuration Importer

This module imports a VyOS device configuration. Module Options msf use auxiliary/admin/networking/vyosconfig msf auxiliaryvyosconfig show actions ...actions... msf auxiliaryvyosconfig set ACTION msf auxiliaryvyosconfig show options ...show and set options... msf auxiliaryvyosconfig run This modu...

PT-2020-16300 · Wikimedia +1 · Fileimporter Extension +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.34.4 FileImporter extension for MediaWiki versions prior to 1.34.4 Description: An issue in the FileImporter extension allows an attacker to import a file into a protected page, bypassing "page creation"...

openSUSE: Security Advisory for gimp (openSUSE-SU-2020:1420-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : gimp (openSUSE-2020-1420)

This update for gimp fixes the following issue : - CVE-2017-17789: Fix heap buffer overflow in PSP importer bsc1073627. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Security update for gimp (low)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2020:1420-1 Rating: low References: 1073627 Cross-References: CVE-2017-17789 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gimp fixes the...

GHSA-9V62-24CR-58CX Denial of Service in node-sass

Affected versions of node-sass are vulnerable to Denial of Service DoS. Crafted objects passed to the renderSync function may trigger C++ assertions in CustomImporterBridge::getimporterentry and CustomImporterBridge::postprocessreturnvalue that crash the Node process. This may allow attackers to...