WordPress SureForms plugin information disclosure vulnerability

WordPress SureForms plugin is a drag-and-drop form builder plugin designed for WordPress, supporting the creation of multi-step forms, dialog forms and other complex features, no programming can quickly build forms. WordPress SureForms plugin suffers from an information disclosure vulnerability...

The vulnerability in the billing system interface for Carbon Billing 5 allows a attacker to perform XSS attacks.

The vulnerability of the Carbon Billing 5 billing system interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability in the web interface of the Cisco Finesse automation software allows a hacker to perform cross-site scripting attacks.

The vulnerability in the web interface for controlling the automation software of Cisco Finesse operators is related to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco TelePresence Management Suite’s centralized video system management software allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface of the Cisco TelePresence Management Suite software for centralized video system management is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Vgate iCar2 WiFi OBD2 Dongle Inadequate Access Protections

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unprotected WiFi access & Unencrypted data transfer product: Vgate iCar 2 WiFi OBD2 Dongle vulnerable version: Vgate iCar 2 WiFi OBD2 Dongle fixed version: - CVE number:...