Grocy Household Management Solution 2.7.1 Cross Site Scripting

Exploit Author: Simran Sankhala Vendor Homepage: https://berrnd.de/ Software Link: https://github.com/grocy/grocy Version: 2.7.1 Tested on: Kali Linux 2020.3 CVE ID Alloted : CVE-2020-25454 Proof Of Concept: grocy household management solution v2.7.1, allows stored XSS , via Add recipe module, th...

be-more-hapi (1.0.0-rc.1.1), kazana-server (3.0.0) +2 more potentially affected by CVE-2015-9243 via hapi (>=11.0.1, <=11.1.2)

hapi NPM version =11.0.1, =0.1.94, =0.1.129 Source cves: CVE-2015-9243 Source advisory: OSV:GHSA-J3G2-M5JJ-6336...

CVE-2020-6165

SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists that are limited...

CVE-2020-6165: Incorrect Default Permissions

SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists that are limited...

App Layering Recipe: How to deploy Microsoft SCCM in a layer

...

Friday Squid Blogging: Stuffed Squid with Vegetables and Pancetta

A Croatian recipe. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

WordPress WP Ultimate Recipe Plugin < 3.12.7 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113501";...

WordPress wp-ultimate-recipe plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-ultimate-recipe is a plugin for inserting recipes into web pages. A cross-site scripting vulnerability exists in WordPress...

Cross site scripting

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

CVE-2019-15836

CVE-2019-15836 affects the WordPress plugin wp-ultimate-recipe, with stored XSS in versions before 3.12.7. The vulnerability is introduced in the plugin code and leads to client‑side code execution when exploited. Remediation per available sources is to upgrade to version 3.12.7 or later. Exploit...

CVE-2019-15836: Improper Neutralization of Input During Web Page Generation

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

PT-2019-14425

Name of the Vulnerable Software and Affected Versions wp-ultimate-recipe plugin versions prior to 3.12.7 Description The issue is related to stored XSS in the wp-ultimate-recipe plugin for WordPress. Recommendations For versions prior to 3.12.7, update to version 3.12.7 or later to resolve the...

WP Ultimate Recipe <= 3.12.6 - Authenticated Stored XSS

The WP Ultimate Recipe WordPress plugin was affected by an Authenticated Stored XSS security vulnerability...

WordPress WP Ultimate Recipe plugin <= 3.12.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found in WordPress WP Ultimate Recipe plugin versions = 3.12.6. Solution Update the WordPress WP Ultimate Recipe plugin to the latest available version at least 3.12.7...

Friday Squid Blogging: Fried Squid Recipe

This is an easy fried squid recipe with saffron and agrodolce. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Squid with Chorizo, Tomato, and Beans

Nice recipe. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Friday Squid Blogging: Roasted Squid with Tomatillo Salsa

Recipe and commentary. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]

The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...

Friday Squid Blogging: Fried Squid with Turmeric

Good-looking recipe. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

be-more-hapi (1.0.0-rc.1.1), kazana-server (3.0.0) +2 more potentially affected by CVE-2015-9241 via hapi (>=11.0.1, <=11.1.2)

hapi NPM version =11.0.1, =0.1.94, =0.1.129 Source cves: CVE-2015-9241 Source advisory: OSV:GHSA-RC8H-3FV6-PXV8...