965 matches found
Exploit for CVE-2024-44308
cve-2024-44308 Michael Goppert, Michael Jennings, and John...
Engaging Online Learning: Strategies to Keep Students Focused and Motivated
While inundated with ideas, you also need to consider how to present them effectively and structure the course…...
SUSE CVE-2022-49065
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svcdeferredevent trace class Fix a NULL deref crash that occurs when an svcrqst is deferred while the sunrpc tracing subsystem is enabled. svcrevisit sets dr-xprt to NULL, so it can't be relied upon in the...
UBUNTU-CVE-2022-49065
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svcdeferredevent trace class Fix a NULL deref crash that occurs when an svcrqst is deferred while the sunrpc tracing subsystem is enabled. svcrevisit sets dr-xprt to NULL, so it can't be relied upon in the...
ASB-A-281665050
In createDatasetItems of DialogFillUi.java, there is a possible way to view another user's image. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CISA: Cybersecurity Evaluation Tool (CSET) Seminar Presentation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: CISA SBOM-A-Rama Day 1 Slides
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
Documentos Digital Signature Spoofing
The vulnerability of Documenso’s digital signature software is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
CVE-2024-51578
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lpagg 3D Presentation 3d-presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through = 1.0...
CVE-2024-51578
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Luca Paggetti 3D Presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through 1.0...
CVE-2024-51578 WordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lpagg 3D Presentation 3d-presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through = 1.0...
CVE-2024-51578
CVE-2024-51578 is a stored Cross-Site Scripting vulnerability in the WordPress plugin 3D Presentation , affecting versions up to 1.0 (version range listed as n/a through 1.0). The issue arises from improper input handling during web-page generation, enabling stored XSS as described in multiple so...
WordPress Plugin 3D Presentation: Cross-site Script Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2024-34721 · Unknown · Luca Paggetti 3D Presentation
Name of the Vulnerable Software and Affected Versions: Luca Paggetti 3D Presentation versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This problem allows Stored XSS, which means an...
CVE-2024-51578: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lpagg 3D Presentation 3d-presentation allows Stored XSS.This issue affects 3D Presentation: from n/a through = 1.0...
WordPress 3D Presentation plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin 3D Presentation versions = 1.0...
WordPress 3D Presentation Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software 3D Presentation Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51578 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ae5c1d333522 Credits SOPROBRO Required privilege Contributor...
Root Access for Data Control: A DEF CON IoT Village Story
Every year, Rapid7 is a presenter at DEF CON’s IoT Village, sharing in-depth insight and expertise into the hacking of all things Internet of Things. This year, our perennial IoT hacking presenter, Principal Security Researcher, IoT, Deral Heiland, along with Rapid7 pentest team members, showed...