9904 matches found
Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue /?s=%3Cimg%20src%20onerror=alert/XSS/%3E...
CVE-2020-17362
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...
CVE-2020-17362
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...
Cross site scripting
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...
CVE-2020-17362
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...
CVE-2020-17362
Nova Lite theme for WordPress (versions before 1.3.9) is affected by a reflected XSS vulnerability in search.php. The issue arises because user-supplied search queries are not properly sanitized, allowing an attacker to inject scripts. Exploitation appears to be unauthenticated (as per multiple s...
PT-2020-14924
Name of the Vulnerable Software and Affected Versions Nova Lite theme for WordPress version prior to 1.3.9 Description The issue allows for Reflected XSS in the search.php file. Recommendations For versions prior to 1.3.9, update to version 1.3.9 or later to resolve the issue...
CVE-2020-17362: Improper Neutralization of Input During Web Page Generation
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...
Mocha Telnet Lite for iOS 4.2 - (User) Denial of Service Exploit
Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of Service DoS Local Tested on OS:...
Mocha Telnet Lite For iOS 4.2 Denial Of Service
Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2020-08-03 Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of...
Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)
Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2020-08-03 Vendor Homepage: https://apps.apple.com/us/app/telnet-lite/id286893976 Software Link: App Store for iOS devices Tested Version: 4.2 Vulnerability Type: Denial of...
Linux/ARM - execve /bin/dash Shellcode (32 bytes)
Title: Linux/ARM - execve /bin/dash Shellcode 32 bytes Category: Shellcode Tested: armv7l 32-bitRaspberry Pi 2 Model B OS: Raspbian Buster Lite Author: Anurag Srivastava Description: execve shellcode / Objdump pi@raspberrypi:/hex $ objdump -d ed1 ed1: file format elf32-littlearm Disassembly of...
PT-2020-10157
Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than 8.0.0.168 Huawei smart phones versions earlier than 9.0.0.177 Huawei smart phones versions earlier than 9.0.0.181 Huawei smart phones versions earlier than 9.0.0.201 Huawei smart phones versions earlie...
CVE-2020-9069: Undefined Security Weakness
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than...
WordPress WP Product Review Lite plugin <= 3.7.5 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Sucuri in WordPress WP Product Review Lite plugin versions = 3.7.5. Solution Update the WordPress WP Product Review Lite plugin to the latest available version at least 3.7.6...
Logic Flaw Vulnerability in SpeedCashLite
SpeedCashLite SCSL is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of SCSL. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
JVN#93064451: Multiple SHARP Android devices vulnerable to information disclosure
Multiple SHARP Android devices contain an information disclosure vulnerability CWE-200. Impact Sensitive information of the device may be obtained by the other android application installed in the device. Solution Update the Firmware Update the firmware to the latest version according to the...
Connected Home Hubs Open Houses to Full Remote Takeover
Three different connected home hubs – Fibaro Home Center Lite, Homematic Central Control Unit CCU2 and Elko’s eLAN-RF-003 – are vulnerable in their older versions to serious bugs that would allow information disclosure, man-in-the-middle MiTM attacks and unauthenticated remote code execution RCE,...
Malicious Package
Overview active-recordlite is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...