WordPress Plugin Pop-Up Chop Chop 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Stored Cross-Site Scripting (XSS)

Description There is insufficient input validation in the pop-up notifications. Proof of Concept Steps to reproduce: 1. Log in to an admin account 2. Click on Services - Services Templates 3. Create a new Service Template with the Name alertdocument.location 4. The XSS is triggered when the...

EyesOfNetwork Local File Inclusion Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides business process configuration tools, generates pop-up windows when events occur in the active queue, and other features.EyesOfNetwork EON 5.3.11 and earlier versions have a...

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Pop-Up Chop Chop plugin versions = 2.1.7. Solution No patched version is available. No reply from the vendor...

Stored Cross-Site Scripting (XSS)

Description There is insufficient input validation in the pop-up notifications. Proof of Concept Steps to reproduce: 1. Log in to an admin account 2. Click on Ports - Manage Groups 3. Create a new Port Group with the Name alertdocument.location and an arbitrary Description 4. The XSS is triggered...

CVE-2022-38070

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

Privilege escalation

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

CVE-2022-38070

CVE-2022-38070 affects the WordPress Pop-up plugin versions ≤ 1.1.5. The issue is a Privilege Escalation impacting subscribers+ (per the CVE entry), with no explicit exploitation details provided in the supplied documents. Root cause/technical specifics are not detailed beyond the vulnerability c...

The vulnerability of the Mozilla Firefox browser, related to incorrect resource cleanup or release, allows a perpetrator to cause a service failure.

The vulnerability of the Mozilla Firefox browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions by opening multiple pop-up windows...

PT-2022-24186 · Unknown · Pop-Up Plugin

Name of the Vulnerable Software and Affected Versions: Pop-up plugin versions 1.1.5 and earlier Description: The issue is related to a Privilege Escalation vulnerability that affects subscribers and above, allowing potential escalation of privileges. Recommendations: For Pop-up plugin versions...

CVE-2022-38070: Undefined Security Weakness

Privilege Escalation subscriber+ vulnerability in Pop-up plugin = 1.1.5 at WordPress...

Pop-up < 1.1.6 - Arbitrary Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability was discovered by Tien Nguyen Anh Patchstack Alliance in the WordPress Pop-up plugin versions = 1.0.9. Solution Update the WordPress Pop-up plugin to the latest available version at least 1.1.6...

Ubuntu: Security Advisory (USN-124-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-37002

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background...

CVE-2022-37002

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background...

PT-2022-23747

Name of the Vulnerable Software and Affected Versions SystemUI affected versions not specified Description The issue is related to a privilege escalation vulnerability in the SystemUI module. This vulnerability can be exploited by malicious applications to pop up windows or run in the background...

ROS-20220701-03

Vulnerability in Mozilla Thunderbird email client is related to improper handling of sandbox header CSP without the "allow scripts" parameter. Exploitation of the vulnerability could allow an attacker acting remotely to use an iframe to bypass an implemented restriction. remotely, use an iframe t...

Spoofing Attacks

firefox and thunderbird are vulnerable to spoofing attacks. The vulnerability exists because a pop-up window could be resized to overlay the address bar with web content, resulting in potential user confusion or spoofing attacks...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which stems from the application's lack of restrictions and filters on the size of pop-up windows. The vulnerability can be exploited by attackers to conduct obfuscation ...