610 matches found
CVE-2022-39892
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...
Samsung Pass 授权问题漏洞
SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 4.0.05.1, which stems from incorrect access control and can be exploited by an attacker to gain...
CVE-2022-39892
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...
PT-2022-25085 · Samsung · Samsung Pass
Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.0.05.1 Description: The issue is related to improper access control, allowing attackers to gain unauthenticated access through the keep open feature. Recommendations: For versions prior to 4.0.05.1, update to...
bind: DoS from specifically crafted TCP packets
A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indefinite time frame via a specifically crafted TCP stream sent from a client. This flaw allows a remote attacker to send specially crafted TCP strea...
DEBIAN-CVE-2022-43280
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...
PT-2022-26828 · Unknown +1 · Wasm-Interp +1
Name of the Vulnerable Software and Affected Versions: wasm-interp version 1.0.29 Description: The issue is related to an out-of-bounds read in the OnReturnCallIndirectExpr component, specifically via the GetReturnCallDropKeepCount method. Recommendations: For version 1.0.29, consider restricting...
Malicious code in eslint-config-keep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dee34721faf47bce15773bdf42e2e7ee9f5cad8eae4aeed1b2a3812ab6be270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2799 Malicious code in eslint-config-keep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dee34721faf47bce15773bdf42e2e7ee9f5cad8eae4aeed1b2a3812ab6be270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the Python programming language-based keep package allows a hacker to execute arbitrary code.
The vulnerability of the Python programming language-based keep package is related to the presence of the malicious dependency “request” without s. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WordPress Plugin Keep Backup Daily Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Keep Backup Daily version 2.0.2 and prior versions, which stems from insufficient...
CVE-2022-1820
The Keep Backup Daily plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘t’ parameter in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...
Cross site scripting
The Keep Backup Daily plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘t’ parameter in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...
CVE-2022-1820
The CVE-2022-1820 entry concerns the WordPress plugin Keep Backup Daily. Affected versions up to and including 2.0.2 are vulnerable to Reflected Cross-Site Scripting via the t parameter due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitr...
WordPress plugin Keep Backup Daily 跨站脚本漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Keep Backup Daily version 2.0.2 and prior versions, which stems from insufficient...
PT-2022-14139 · WordPress · Keep Backup Daily
Name of the Vulnerable Software and Affected Versions: The Keep Backup Daily plugin for WordPress versions up to, and including, 2.0.2 Description: The issue is related to Reflected Cross-Site Scripting via the t parameter due to insufficient input sanitization and output escaping. This allows...
Remote Code Execution (RCE)
keep is vulnerable to remote code execution. The vulnerability exists due to the library has a malicious backdoor which allows an attacker to inject maliciously crafted script into the system...
CVE-2022-30877
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...
