PT-2022-37137

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 8. The crash state involves several functions: rc free text enum, gs text...

Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol

The popular protocol for radio controlled RC aircraft called ExpressLRS can be hacked in only a few steps, according to a bulletin published last week. ExpressLRS is an open-source long range radio link for RC applications, such as first-person view FPV drones. “Designed to be the best FPV Racing...

rc-bochum-mark.de Cross Site Scripting vulnerability OBB-2703159

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Elefant CMS Cross-Site Scripting Vulnerability (CNVD-2022-58245)

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by attackers to perform cross-site scripting attacks...

Elefant CMS Cross-Site Scripting Vulnerability (CNVD-2022-58244)

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by attackers to perform cross-site scripting attacks...

Cross site scripting in Elefant CMS

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting Persistent. It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to addres...

Malicious code in rc-add-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f276516a3eaa094c2646799cee2b0c4e2c604ed70d1d512e7168e91c99a808b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5602 Malicious code in rc-add-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f276516a3eaa094c2646799cee2b0c4e2c604ed70d1d512e7168e91c99a808b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5603 Malicious code in rc-add-in-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2970478b3b25a1b749b4e4c2cd0d0f5a97316b27bf5cb5cb07dde2c6002014d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-postmessage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3efaf8ce2d77ed7f18f8738560aeafd7abb05ba0520d5498241baca769bdbaab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5604 Malicious code in rc-postmessage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3efaf8ce2d77ed7f18f8738560aeafd7abb05ba0520d5498241baca769bdbaab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-qna-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af95347190cb80ff6def6e7f12e037250c25d2d9d3b86b202747825483a14f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5605 Malicious code in rc-qna-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af95347190cb80ff6def6e7f12e037250c25d2d9d3b86b202747825483a14f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yarn-design-system-rc-input-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af670dcb9945b741b8a4b4a71a54c4da8d08032685b0db16fdfbe7847bd66d0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code injection

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /designer/add/layout. The manipulation leads to code injection. The attack can be launched remotely. Upgrading to version 1.3.13 is able to...

CVE-2017-20062

CVE-2017-20062 affects Elefant CMS 1.3.12-RC. The issue is a cross-site request forgery (CSRF) vulnerability that can be manipulated remotely; exploit has been disclosed publicly. Upgrading to version 1.3.13 mitigates the issue. Multiple connected sources (RH, NVD, OSV, CNVD, CNVD/Vuln enrichment...

Elefant CMS 跨站脚本漏洞

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by attackers to perform cross-site scripting attacks...

CVE-2017-20062: Cross-Site Request Forgery (CSRF)

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

Elefant CMS 代码问题漏洞

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which stems from unknown functionality in file/filemanager/upload/drop for component file uploads. A remote...

CVE-2017-20060: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...