20615 matches found
pro-begatalbahn.de Cross Site Scripting vulnerability OBB-3830489
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer
Threat actors are resorting to YouTube videos featuring content related to cracked software in order to entice users into downloading an information stealer malware called Lumma. "These YouTube videos typically feature content related to cracked applications, presenting users with similar...
WordPress Word Replacer Pro Plugin <= 1.0 is vulnerable to Broken Access Control
Software Word Replacer Pro Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52229 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 214b09832f8e Credits thiennv Required privilege...
VulnCheck KEV: CVE-2022-29081
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...
Custom 404 Pro < 3.10.1 - Unauthenticated Stored Cross-Site Scripting via logging
Description The Custom 404 Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several logged parameters in all versions up to, and including, 3.10.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2023-41784
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...
CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...
CVE-2023-41784
CVE-2023-41784 affects ZTE Red Magic 8 Pro and is described as a Permissions and Access Control vulnerability (improper access control). The NVD entry lists a local attack vector with low attack complexity, no privileges required, but user interaction required, and it can impact confidentiality (...
CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...
PT-2024-12974 · Zte · Zte Red Magic 8 Pro
Name of the Vulnerable Software and Affected Versions: ZTE Red Magic 8 Pro affected versions not specified Description: The issue concerns a Permissions and Access Control Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or detai...
ZTE Red Magic 8 Pro Security Vulnerability
ZTE Red Magic 8 Pro is a gaming smartphone. A security vulnerability exists in the ZTE Red Magic 8 Pro GENCNNX729JV1.0.0B21MR version, which stems from the presence of an improper access control vulnerability. An attacker can exploit the vulnerability to gain unauthorized access to the relevant...
CVE-2023-6339
Google Nest WiFi Pro root code-execution & user-data compromise...
Remote code execution
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339
CVE-2023-6339 affects Google Nest WiFi Pro. The vulnerability allows remote root code execution and user-data compromise over the network with low attack complexity and no privileges required. Impacted by confidentiality, integrity, and availability being high. CVSS metrics show a critical risk (...
PT-2024-14935 · Google · Google Nest Wifi Pro
Name of the Vulnerable Software and Affected Versions: Google Nest WiFi Pro affected versions not specified Description: A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices...
Malicious code in new-pro-anu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...
ASB-A-300090204
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...