650 matches found
CVE-2022-44585
CVE-2022-44585 concerns WordPress Homepage Pop-up plugin (versions
CVE-2022-44585: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Magneticlab Sàrl Homepage Pop-up plugin = 1.2.5 versions...
WordPress Plugin Homepage Pop-up 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plug-in. A cross-site request forgery vulnerability...
PT-2023-14511
Name of the Vulnerable Software and Affected Versions Magneticlab Sàrl Homepage Pop-up plugin versions = 1.2.5 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
Stored XSS while adding a memo
Description Stored cross-site scripting also known as second-order or persistent XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. Proof of Concept Payload: " 1 Go to https://demo.usememos.com/ and login...
Privilege Escalation
github.com/aws/amazon-cloudwatch-agent is vulnerable to privilege escalation. The vulnerability exists when a user triggers a repair of the Agent which results in a pop-up window opening with SYSTEM permissions on Windows, allowing an attacker with administrative access to create a new command...
CVE-2022-39910
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view...
CVE-2022-39910
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view...
CVE-2022-39910
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view...
CVE-2022-39910: Improper Access Control
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view...
Google Chrome Security Bypass Vulnerability (CNVD-2023-08409)
Google Chrome is a web browser from Google, Inc. A security bypass vulnerability exists in Google Chrome, which stems from insufficient policy enforcement in the pop-up blocker. An attacker could exploit this vulnerability to bypass security restrictions...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting.The vulnerability exists in destroy function of DeviceGroupController.php and PortGroupController.php due to insufficient input validation in the pop-up notifications which allows an attacker to inject and execute malicious javaScript...
The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird, related to information representation errors in the user interface, allow attackers to perform spear-phishing attacks.
The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow attackers to perform spear-phishing attacks by making a series of pop-up windows and calls to...
Homepage Pop-up <= 1.2.5 - CSRF
The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2022-41638
Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...
Cross site scripting
Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...
CVE-2022-41638 WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. Stored Cross-Site Scripting XSS in Pop-Up Chop Chop plugin = 2.1.7 on WordPress...
CVE-2022-41638
The CVE-2022-41638 entry concerns the WordPress plugin Pop-Up Chop Chop (versions
PT-2022-25997
Name of the Vulnerable Software and Affected Versions Pop-Up Chop Chop plugin versions = 2.1.7 on WordPress Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS in the Pop-Up Chop Chop plugin. No information is provided about the estimated number of potentially...