NextGen Mirth Connect Command Injection Vulnerability

NextGen Mirth Connect is a healthcare integration engine from NextGen USA. A security vulnerability exists in NextGen Mirth Connect version v4.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary commands on the hosting server...

CVE-2023-37679

A remote command execution RCE vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server...

CVE-2023-37679

CVE-2023-37679 / CVE-2023-43208 (NextGen HealthCare Mirth Connect) : Open-source data integration platform vulnerable to unauthenticated remote code execution due to improper/deserialization handling. Affects Mirth Connect versions prior to 4.4.1 (PoCs and advisories reference vulnerable ranges i...

WordPress NextGEN Gallery Plugin <= 3.3.6 is vulnerable to Cross Site Scripting (XSS)

Software NextGEN Gallery Type Plugin Vulnerable versions = 3.3.6 Fixed in 3.4.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 1895dd78f517 Credits Rafie Muhammad Patchstack Required...

CVE-2023-34185

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-34185

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-34185 WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-34185

CVE-2023-34185 is a CSRF vulnerability affecting WordPress NextGen GalleryView plugin versions up to 0.5.5. The issue, reported across multiple sources, involves unauthenticated CSRF in the plugin, with PatchStack noting no fixed version and Red Hat/NVD data aligning on the vulnerability descript...

PT-2023-24724 · WordPress · Nextgen Galleryview

Name of the Vulnerable Software and Affected Versions: John Brien WordPress NextGen GalleryView plugin versions 0.5.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web...

WordPress Plugin WordPress NextGen GalleryView 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Oracle Global Lifecycle Management (OPatch) (Jan 2023 CPU)

The installation of Oracle Global Lifecycle Management OPatch installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware...

PT-2023-9236 · Nexgen · Nextgen Mirth Connect

Name of the Vulnerable Software and Affected Versions: NextGen Mirth Connect version 4.3.0 Description: A remote command execution issue allows attackers to execute arbitrary commands on the hosting server. The vulnerability is related to the XStreamSerializer class and is due to a lack of data...

PT-2023-6602

Name of the Vulnerable Software and Affected Versions NextGen Healthcare Mirth Connect versions prior to 4.4.1 Description The issue is related to an incomplete patch for a previous vulnerability, leading to unauthenticated remote code execution. This vulnerability is caused by insufficient acces...

CVE-2023-35098

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-35098

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-35098

CVE-2023-35098 describes an unauthenticated reflected XSS in the WordPress NextGen GalleryView plugin (

PT-2023-25147 · John Brien · Nextgen Gallery Plugin

Name of the Vulnerable Software and Affected Versions: John Brien WordPress NextGen GalleryView plugin versions 0.5.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a...

WordPress plugin NextGen GalleryView 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...