CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

Directory traversal

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

nopCommerce 路径遍历漏洞

nopCommerce is an open source general purpose e-commerce platform. A security vulnerability exists in nopCommerce version 4.50.1, which stems from the vulnerability to directory traversal via backup files in the maintenance feature...

CVE-2022-28451

CVE-2022-28451 affects nopCommerce 4.50.1 via a Directory Traversal vulnerability in the Maintenance feature’s backup file handling. The root cause is improper validation of backup file paths in the BackupAction flow of the CommonController.cs/file, allowing access to arbitrary files outside the ...

CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

Four Benefits of Software as a Service (SaaS) for Cybersecurity Teams

Software as a service, or SaaS as it’s more commonly known, is more than just a license delivery model and a way for cybersecurity teams to pay for critical cybersecurity software - it has real benefits for the customer. In a SaaS distribution model, the software is hosted by the software service...

GSD-2022-1001761 ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()

ubifs: Fix read out-of-bounds in ubifswbufwritenolock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

Input validation

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

Rethinking Cyber-Defense Strategies in the Public-Cloud Age

The pandemic has fast-tracked migration to the public cloud, including Amazon Web Services, Google Compute Platform and Microsoft Azure. But the journey hasn’t exactly been smooth as silk: The great migration has brought a raft of complex security challenges, which have led to headline-grabbing...

WordPress WP Maintenance plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

CVE-2021-36828

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

CVE-2021-36828

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

Cross site scripting

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

CVE-2021-36828

CVE-2021-36828 affects the WordPress WP Maintenance plugin, with an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in versions up to 6.0.7. The issue involves multiple inputs not being properly sanitized, enabling XSS by privileged users. Several sources (NVD/NIST, CVE rec...

CVE-2021-36828 WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

PT-2022-10567 · WordPress · Wp Maintenance

Name of the Vulnerable Software and Affected Versions: WP Maintenance plugin versions prior to 6.0.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS in the WP Maintenance plugin. This affects multiple inputs and can be exploited by authenticated administrator...

WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas Patchstack Alliance in WordPress WP Maintenance plugin versions = 6.0.7. Solution Update the WordPress WP Maintenance plugin to the latest available version at least 6.0.8...

WP Maintenance < 6.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape multiple of its settings, which could allow high privileged users such as admin to perform Cross-Site Scripting attack when the unfilteredhtml is disallowed...

WordPress plugin WP Maintenance 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...