GHSA-4C5W-QQFG-GRF3 Symphony CMS XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

PT-2022-20095

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/admin/?page=maintenance/manage category&id= endpoint. The id parameter is vulnerable to SQL injectio...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=maintenance/managecategory& id= to conduct an SQL injection attack...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=maintenance/managesub category&id= to conduct an SQL injection attack...

PT-2022-19944

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /cms/admin/maintenance/manage service.php endpoint, specifically through the id parameter. Recommendations For Simple Client...

Mozilla Firefox Security Advisory (MFSA2021-10) - Windows

This host is missing a security update for Mozilla Firefox. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Secomea SiteManager Stack Buffer Overflow Vulnerability

Secomea SiteManager is a Danish Secomea application that provides a remote maintenance function for industrial equipment. Secomea SiteManager is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause arbitrary code execution...

Secomea SiteManager 缓冲区错误漏洞

Secomea SiteManager is a Danish Secomea application that provides a remote maintenance function for industrial equipment. Secomea SiteManager is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause arbitrary code execution...

Samsung Galaxy S3 代码问题漏洞

Samsung Galaxy S22 is a smartphone product released on February 9, 2022 by Samsung. The Samsung Galaxy S22 StrongBox suffers from a State Maintenance Error vulnerability that stems from incorrect StrongBox state maintenance. An attacker can exploit the vulnerability to change the Android ROT duri...

CVE-2022-28793: Improper Check for Unusual or Exceptional Conditions

Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time...

CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

Directory traversal

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

nopCommerce 路径遍历漏洞

nopCommerce is an open source general purpose e-commerce platform. A security vulnerability exists in nopCommerce version 4.50.1, which stems from the vulnerability to directory traversal via backup files in the maintenance feature...

CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

CVE-2022-28451

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

CVE-2022-28451

CVE-2022-28451 affects nopCommerce 4.50.1 via a Directory Traversal vulnerability in the Maintenance feature’s backup file handling. The root cause is improper validation of backup file paths in the BackupAction flow of the CommonController.cs/file, allowing access to arbitrary files outside the ...

CVE-2022-28451: Improper Limitation of a Pathname to a Restricted Directory

nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature...

PT-2022-19038

Name of the Vulnerable Software and Affected Versions nopCommerce version 4.50.1 Description The issue concerns a Directory Traversal vulnerability via the backup file in the Maintenance feature. Recommendations For nopCommerce version 4.50.1, update to a version that fixes this issue to prevent...

Four Benefits of Software as a Service (SaaS) for Cybersecurity Teams

Software as a service, or SaaS as it’s more commonly known, is more than just a license delivery model and a way for cybersecurity teams to pay for critical cybersecurity software - it has real benefits for the customer. In a SaaS distribution model, the software is hosted by the software service...