CVE-2022-47593

Auth. subscriber+ SQL Injection SQLi vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin = 1.6.35 versions...

Sql injection

Auth. subscriber+ SQL Injection SQLi vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin = 1.6.35 versions...

CVE-2022-47593

CVE-2022-47593 affects WordPress RapidLoad Power-Up for Autoptimize plugin, versions ≤ 1.6.35. The vulnerability is an SQL Injection exploitable by authenticated subscribers. Patchstack and other sources state the fix is in version 1.6.36 or later. Practical impact: unauthorized access to data vi...

PT-2023-15417 · WordPress · Rapidload Power-Up For Autoptimize

Name of the Vulnerable Software and Affected Versions: RapidLoad Power-Up for Autoptimize plugin versions = 1.6.35 Description: The issue is related to an SQL Injection vulnerability in the RapidLoad Power-Up for Autoptimize plugin. This vulnerability can be exploited by authenticated subscribers...

Security Bulletin: This Power System update is being released to address CVE-2023-1017 and CVE-2023-1018

Summary TCG Trusted Platform Module code is used by PowerVM to support virtual TPM. This bulletin provides a remediation for the impacted vulnerabilities, CVE-2023-1017 and CVE-2023-1018, by upgrading PowerVM and thus addressing the exposure to the TCG TPM vulnerability. Vulnerability Details...

Security Bulletin: Vulnerability in Apache HTTP Server ( CVE-2023-25690 ) affects Power HMC

Summary Apache HTTP Server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE's. Vulnerability Details CVEID:CVE-2023-25690 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP request splitting attacks, caused by an error when modproxy is enabled along with...

Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2022-36760 and CVE-2022-37436 ) affects Power HMC

Summary Apache HTTP Server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE's. Vulnerability Details CVEID:CVE-2022-36760 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP request smuggling, caused by an inconsistent interpretation of HTTP Requests...

Eaton Power Xpert Meter Use of Hard-coded Credentials (CVE-2018-16158)

Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins to uid 0 via the PubkeyAuthentication...

Power LED Side-Channel Attack

This is a clever new side-channel attack: The first attack uses an Internet-connected surveillance camera to take a high-speed video of the power LED on a smart card reader­--or of an attached peripheral device--­during cryptographic operations. This technique allowed the researchers to pull a...

power-electronics.com Cross Site Scripting vulnerability OBB-3446504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Microsoft Power Apps development environment, related to errors in the user interface’s information representation, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Power Apps development environment is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

CVE-2023-32024

Microsoft Power Apps Spoofing Vulnerability...

Spoofing

Microsoft Power Apps Spoofing Vulnerability...

CVE-2023-32024

CVE-2023-32024: Microsoft Power Apps Spoofing Vulnerability. A remote attacker can spoof the user interface in Microsoft Power Apps (and related Dynamics context) due to a UI spoofing flaw. Impact is spoofing the UI to deceive users; no public exploitation details are confirmed in these sources. ...

CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability

...

CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability

...

CVE-2023-32465

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker...

CVE-2023-32465

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker...

Authentication flaw

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker...

CVE-2023-32465

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker...