773 matches found
WordPress Showing URL in QR Code plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Event Registration System 跨站脚本漏洞
Event Registration System is a QR code-based event registration system by Carlo Montero, a personal developer. A security vulnerability exists in Event Registration System version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
CVE-2022-3847
The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack...
CVE-2022-3847 Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack...
WordPress plugin Showing URL in QR Code 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-3847: Undefined Security Weakness
The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack...
PT-2022-24420 · WordPress · Showing Url In Qr Code Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The Showing URL in QR Code WordPress plugin version 0.0.1 Description: The issue is related to the lack of CSRF check when updating settings and missing sanitization as well as escaping in the plugin. This could allow attackers to make...
Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF
The plugin does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack Make a logged in editor or admin open a page with the below payload...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management System version v9.4.2, which was discovered to contain an SQL injection...
Apple puts the password on life support with passkey
The "passwordless future" is something many internet users--and a great majority of the cybersecurity industry--have hoped for. Now Apple is about to make those hopes a reality. With the release of iOS 16 yesterday, and macOS Ventura next month, Apple fans will be able to use passkeys, its passwo...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the idno parameter of the /card/in-card.php file in version 1.0 of the Library Management System, which c...
A week in security (August 29 - September 4)
Last week on Malwarebytes Labs: Twilio data breach turns out to be more elaborate than suspected Playing Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18 Chromium browsers can write to the system clipboard without your permission British Airways customers targeted in lost luggag...
Final Fantasy 14 players targeted by QR code phishing
Final Fantasy 14, the smash-hit online role playing game, is under fire from scammers. The attack is a devious way to try and compromise player accounts, making use of free item promises and bogus QR codes. As the game is a constantly changing service, its almost impossible to keep up with new...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the v1.0 version of Library Management System due to an SQL injection issue in the id parameter of the...
CVE-2022-20321
In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android 13, which stems from a lack of permission checking in its "setting" to read the contents of a wifi QR code, which could result in local information being made public...
CVE-2022-20321
CVE-2022-20321 affects Android 13 where the Settings component fails a permission check, allowing an application without permissions to read the contents of WiFi QR codes. The underlying issue is a missing access control in the UI flow for reading WiFi network data, enabling local information dis...
Library Management System 跨站脚本漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Library Management System, which stems from unknown code in the file /qr/I/ being affected,...
