7914 matches found
CVE-2022-22570
A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...
CVE-2022-22570
A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...
CVE-2022-22570
A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...
Buffer overflow
A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...
CVE-2022-22570
A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...
CVE-2022-22570
The vulnerability CVE-2022-22570 affects the UniFi Door Access Reader Lite (UA Lite) firmware
Ubiquiti UniFi Door Access Reader Lite 安全漏洞
The Ubiquiti UniFi Door Access Reader Lite Ubiquiti UA Lite is a modern NFC and Bluetooth reader from Ubiquiti USA. A security vulnerability exists in UniFi Door Access Reader Lite UA Lite firmware version 3.8.28.24 and earlier, which originates from a vulnerability that allows a malicious actor...
Modern Events Calendar Lite < 6.4.7 - Reflected Cross-Site Scripting
The plugin does not escape some generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC On a page where the Total Booking widget is displayed, append the following payload: "...
WordPress plugin Modern Events Calendar Lite跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Modern Events Calendar Lite 6.4.0 previously...
CVE-2022-0364
The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
CVE-2022-0364
The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
Backdoor.Win32.BNLite Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/0d1f873f6816debd244e1e77509f6ba7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.BNLite Vulnerability: Remote Stack Buffer Overflow Description: BioNet Lite Server 4....
CVE-2022-23987
The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape their Form Name, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-23988
The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission...
WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin < 1.5.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin versions 1.5.8. Solution Update the WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin to the latest available version at least 1.5.8...
WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...
WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...
WordPress UltraAddons Elementor Lite plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress UltraAddons Elementor Lite plugin versions = 1.1.0. Solution Update the WordPress UltraAddons Elementor Lite plugin to the latest available version at least 1.1.1...
WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin < 1.5.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin versions 1.5.8. Solution Update the WordPress Elegant Calendar Lite – WordPress Events Calendar Plugin plugin to the latest available...
WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin <= 1.0.5 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin versions = 1.0.5. Solution Update the WordPress Ultimate Divi Modules Suite – Divi Sumo Lite plugin to the latest available version at least 1.0.6...