PT-2022-24420 · WordPress · Showing Url In Qr Code Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Showing URL in QR Code WordPress plugin version 0.0.1 Description: The issue is related to the lack of CSRF check when updating settings and missing sanitization as well as escaping in the plugin. This could allow attackers to make...

WordPress plugin Showing URL in QR Code 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF

The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack Make a logged in editor or admin open a page with the below payload...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management System version v9.4.2, which was discovered to contain an SQL injection...

Apple puts the password on life support with passkey

The "passwordless future" is something many internet users--and a great majority of the cybersecurity industry--have hoped for. Now Apple is about to make those hopes a reality. With the release of iOS 16 yesterday, and macOS Ventura next month, Apple fans will be able to use passkeys, its passwo...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the idno parameter of the /card/in-card.php file in version 1.0 of the Library Management System, which c...

A week in security (August 29 - September 4)

Last week on Malwarebytes Labs: Twilio data breach turns out to be more elaborate than suspected Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18 Chromium browsers can write to the system clipboard without your permission British Airways customers targeted in lost luggag...

Final Fantasy 14 players targeted by QR code phishing

Final Fantasy 14, the smash-hit online role playing game, is under fire from scammers. The attack is a devious way to try and compromise player accounts, making use of free item promises and bogus QR codes. As the game is a constantly changing service, its almost impossible to keep up with new...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the v1.0 version of Library Management System due to an SQL injection issue in the id parameter of the...

CVE-2022-20321

In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a lack of permission checking in its "setting" to read the contents of a wifi QR code, which could result in local information being made public...

CVE-2022-20321

CVE-2022-20321 affects Android 13 where the Settings component fails a permission check, allowing an application without permissions to read the contents of WiFi QR codes. The underlying issue is a missing access control in the UI flow for reading WiFi network data, enabling local information dis...

Library Management System 跨站脚本漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Library Management System, which stems from unknown code in the file /qr/I/ being affected,...

[SECURITY] Fedora 36 Update: golang-github-skip2-qrcode-0-3.20220316gitda1b656.fc36

QR Code encoder Go...

CVE-2022-24992

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal...

CVE-2022-24992

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal...

CVE-2022-24992

The CVE-2022-24992 entry concerns QR Code Generator version 5.2.7, specifically the process.php component, where improper handling enables directory traversal. The exploit surface is described across multiple sources (e.g., Red Hat, PT- Security, CNNVD) with no explicit mitigation or patched vers...

CVE-2022-24992

A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal...

PT-2022-17036 · Unknown · Qr Code Generator

Name of the Vulnerable Software and Affected Versions: QR Code Generator version 5.2.7 Description: A vulnerability in the component process.php of QR Code Generator allows attackers to perform directory traversal. Recommendations: For QR Code Generator version 5.2.7, consider restricting access ...

DENSO WAVE QR Code Generator 路径遍历漏洞

DENSO WAVE QR Code Generator is a QR code generator from DENSO WAVE Japan. A security vulnerability exists in DENSO WAVE QR Code Generator version v5.2.7. An attacker can exploit the vulnerability to perform directory traversal...