921 matches found
WordPress Mobile App Editor – WordPress to Android App Builder Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Mobile App Editor – WordPress to Android App Builder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 2273721d5def Credits...
WordPress WordApp Mobile App Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software WordApp Mobile App Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3aec8014f5d8 Credits Rafie Muhammad Patchstack...
WordPress AppExperts – WordPress to Mobile App – WooCommerce to iOs and Android Apps Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)
Software AppExperts – WordPress to Mobile App – WooCommerce to iOs and Android Apps Type Plugin Vulnerable versions = 1.4.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...
Spy vs. spy: Exploring the LetMeSpy hack, with maia arson crimew
The language of a data breach, no matter what company gets hit, is largely the same. There's the stolen data--be it email addresses, credit card numbers, or even medical records. There are the users--unsuspecting, everyday people who, through no fault of their own, mistakenly put their trust into...
Mattermost 信任管理问题漏洞
Mattermost is an open source collaboration platform from US-based Mattermost. A security vulnerability exists in Mattermost iOS that stems from a failure to properly validate server certificates when initializing a TLS connection, allowing an attacker to intercept WebSockets connections...
CVE-2023-29656
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
Authorization
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
CVE-2023-29656
An improper authorization vulnerability in Darktrace mobile app Android prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actionsblock/unblock traffic from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress...
Darktrace mobile app 安全漏洞
The Darktrace mobile app is Darktrace's new way to experience Darktrace Threat Visualizer and benefit from Darktrace DETECT and Darktrace RESPOND technologies anytime, anywhere. A security vulnerability exists in version 6.0.15 of the Darktrace mobile app that originates from allowing disabled an...
CVE-2023-29656
The CVE-2023-29656 entry describes an improper authorization vulnerability in the Darktrace Mobile App (Android) prior to version 6.0.15. Affected component: antigena actions (block/unblock traffic) exposed in the mobile app. Root cause: disabled or low-privilege users can control antigena action...
CVE-2023-3065
Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20...
CVE-2023-3065 Mobatime mobile application - Authentication bypass
Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20...
CVE-2023-3064 Mobatime mobile application - Sensitive information disclosure
Anonymous user may get the list of existing users managed by the application, that could ease further attacks see CVE-2023-3065 and 3066This issue affects Mobatime mobile application AMXGT100 through 1.3.20...
CVE-2022-41690
Improper access control in the IntelR Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Western Digital My Cloud 安全漏洞
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud that stems from a lack of authentication checks on private IPs. An attacker could exploit this vulnerability to obtain information about the device. The...
PT-2023-18711 · Western Digital · My Cloud Home Web App +5
Name of the Vulnerable Software and Affected Versions: My Cloud OS 5 Mobile App versions prior to 4.21.0 My Cloud Home Mobile App versions prior to 4.21.0 ibi Mobile App versions prior to 4.21.0 My Cloud OS 5 Web App versions prior to 4.26.0-6126 My Cloud Home Web App versions prior to 4.26.0-612...
Introducing the Malwarebytes Admin app: Endpoint security at your fingertips
If youre on the beach sipping piña coladas, the last thing you probably want to do is rush to your desktop and address a critical security issue. And yet, this is the reality for many IT security professionals today. Regardless of the time or current location, security pros are expected to drop...
ManageEngine ADSelfService Plus < build 6218 DoS
According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6218. It is, therefore, affected by a denial of service DoS vulnerability which allows any unauthenticated remote user to cause an application restart by sending a...