3041 matches found
Kubeaudit - Tool To Audit Your Kubernetes Clusters Against Common Security Controls
kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as: run as non-root use a read-only root filesystem drop scary capabilities, don't add new ones don't run privileged and more! tldr.kubeaudit makes sure you deploy secure...
Malicious Package
Overview quick-app-guide is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)
A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this extension?...
Samsung Quick Share Access Control Error Vulnerability
Samsung Quick Share, a Quick Share application developed by Samsung Korea, is vulnerable to an access control error in versions prior to Samsung Quick Share 13.1.2.4. The vulnerability stems from improper access control and can be exploited by attackers to access internal files in Quick Share...
CVE-2022-1792
The Quick Subscribe WordPress plugin through 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and leading to Stored XSS due to the lack of sanitisation and escaping in some of them...
CVE-2022-1792
The Quick Subscribe WordPress plugin through 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and leading to Stored XSS due to the lack of sanitisation and escaping in some of them...
CVE-2022-1792
The CVE-2022-1792 entry affects the WordPress Quick Subscribe plugin (versions up to 1.7.1). It describes a CSRF flaw in settings updates that can permit a logged-in attacker to alter settings, with Stored XSS risk due to insufficient sanitisation/escaping. Root cause: absence of CSRF checks and ...
WordPress plugin Quick Subscribe 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2022-30745
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...
CVE-2022-30745
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...
CVE-2022-30745
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...
Improper access control
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...
CVE-2022-30745
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share...
CVE-2022-30745
CVE-2022-30745 concerns Samsung Quick Share. The issue is an improper access control flaw in Quick Share versions prior to 13.1.2.4, allowing an attacker to access internal files. Affected product: Samsung Quick Share (pre-13.1.2.4). Root cause: improper access control; impact: potential exposure...
PT-2022-20284 · Unknown · Quick Share
Name of the Vulnerable Software and Affected Versions: Quick Share versions prior to 13.1.2.4 Description: The issue is related to improper access control in Quick Share, allowing an attacker to access internal files. Recommendations: For versions prior to 13.1.2.4, update to version 13.1.2.4 or...
Samsung mobile 安全漏洞
Samsung Quick Share, a Quick Share application developed by Samsung Korea, is vulnerable to an access control error in versions prior to Samsung Quick Share 13.1.2.4. The vulnerability stems from improper access control and can be exploited by attackers to access internal files in Quick Share...
PT-2022-14209 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 15.0 through 15.0.1 Description: An issue has been discovered in GitLab where missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details. Recommendations: For GitL...
FreeBSD : Gitlab -- multiple vulnerabilities (f414d69f-e43d-11ec-9ea4-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f414d69f-e43d-11ec-9ea4-001b217b3468 advisory. - Gitlab reports: Account take over via SCIM email change Stored XSS in Jira integration Quick...
Notionterm - Embed Reverse Shell In Notion Pages
Embedreverse shell in Notion pages. Hack while taking notes FOR: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable reverse shell...
GitLab Enterprise Edition和GitLab Community Edition 跨站脚本漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A cross-site scripting vulnerability exists in GitLab Community Edition and...