CVE-2023-22854

The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information...

ConnectWise Control 注入漏洞

ConnectWise Control is a self-hosted remote desktop software application from ConnectWise USA. An injection vulnerability exists in ConnectWise Control versions prior to 22.9.10032 that stems from an inability to validate user-supplied parameters...

Mitel MiContact Center Business 安全漏洞

Mitel MiContact Center Business is an all-media contact center platform from Mitel. The platform is used for customer communication, production management and other scenarios. A security vulnerability exists in the Mitel MiContact Center Business server versions 9.2.2.0 to 9.4.1.0, which is cause...

CVE-2022-47323

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47322

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This issue could permit query parameter smuggling when a Go proxy forwards a parameter with an...

CVE-2022-2094

The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting...

Cross site scripting

The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting...

CVE-2022-2094 Yellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting

The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting...

WordPress plugin Yellow Yard Searchbar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-0236 Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting

The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the resetkey and userid parameters before outputting then back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Sql injection

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

CVE-2022-47370

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47369

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47368

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-44448

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-38681

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

PT-2023-15285 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing parameters check in the wlan driver, which could lead to a local denial of service in wlan services. Recommendations: At the moment, there is ...

WordPress plugin Annual Archive 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. A cross-site scripting...

Quick Contact Form < 8.0.4 - Contributor+ Stored XSS

The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...