Lucene search
+L

3714 matches found

CNNVD
CNNVD
•added 2022/08/18 12:00 a.m.•22 views

QEMU 资源管理错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a security vulnerability that originates from the fact that an attacker on a client system can force the reuse of a freed...

4.4CVSS6.6AI score0.00427EPSS
SaveExploits1References15
Prion
Prion
•added 2022/08/16 7:15 p.m.•29 views

Cross site scripting

A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument posttitle with the input leads to cross si...

5.8CVSS6AI score0.00623EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/16 12:00 a.m.•9 views

CVE-2022-2843: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in MotoPress Timetable and Event Schedule. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument posttitle with the input leads to cross si...

6.1CVSS4.4AI score0.00623EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2022/08/11 7:43 a.m.•12 views

quick-paw.ba Cross Site Scripting vulnerability OBB-2836059

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/07/28 3:15 p.m.•23 views

CVE-2022-1948

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details...

8.7CVSS6AI score0.01077EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2022/07/28 2:46 p.m.•4 views

CVE-2022-1948

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details...

9.3CVSS0.01077EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/28 12:00 a.m.•3 views

CVE-2022-1948: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details...

8.7CVSS5.8AI score0.01077EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/23 12:15 a.m.•14 views

CVE-2022-1127

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction...

8.8CVSS7.2AI score0.00919EPSS
SaveExploits1References4
osv_mal
osv_mal
•added 2022/07/21 10:55 a.m.•12 views

MAL-2022-5565 Malicious code in quick-app-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fa909b77c2a83a94b3e5a05b0239e00d7efc1e305d4080d5f0c7b2fc740a7d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/07/21 10:55 a.m.•8 views

Malicious code in quick-app-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fa909b77c2a83a94b3e5a05b0239e00d7efc1e305d4080d5f0c7b2fc740a7d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2022/07/20 7:15 p.m.•20 views

CVE-2022-29923

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

4.8CVSS5.8AI score0.00608EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/20 7:15 p.m.•33 views

CVE-2022-29923

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

5.9CVSS0.00608EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/20 7:15 p.m.•32 views

Cross site scripting

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

4.3CVSS5AI score0.00608EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/20 6:39 p.m.•37 views

CVE-2022-29923 WordPress Quick Restaurant Reservations plugin <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

5.9CVSS5.7AI score0.00608EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/20 6:39 p.m.•78 views

CVE-2022-29923

CVE-2022-29923 is an authenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin ThingsForRestaurants Quick Restaurant Reservations . The issue affects the plugin versions up to and including 1.4.1 and requires an administrator or higher user role to exploit (attack v...

5.9CVSS5AI score0.00608EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•5 views

CVE-2022-29923: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in ThingsForRestaurants Quick Restaurant Reservations WordPress plugin allows Reflected XSS.This issue affects Quick Restaurant Reservations WordPress plugin: from n/a through 1.4.1...

5.9CVSS5.6AI score0.00608EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•23 views

PT-2022-19908 · WordPress · Quick Restaurant Reservations

Name of the Vulnerable Software and Affected Versions: Quick Restaurant Reservations WordPress plugin versions 1.4.1 and earlier Description: The issue is a Cross-site Scripting XSS vulnerability, specifically a Reflected XSS, in the Quick Restaurant Reservations WordPress plugin. This...

5.9CVSS6AI score0.00608EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2022/07/16 12:30 p.m.•138 views

Kubeaudit - Tool To Audit Your Kubernetes Clusters Against Common Security Controls

kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as: run as non-root use a read-only root filesystem drop scary capabilities, don't add new ones don't run privileged and more! tldr.kubeaudit makes sure you deploy secure...

7.6AI score
SaveExploits0References31
Snyk
Snyk
•added 2022/06/23 9:24 a.m.•9 views

Malicious Package

Overview quick-app-guide is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2022/06/16 12:30 p.m.•47 views

Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)

A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this extension?...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder