4746 matches found
Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. This vulnerability affects multiple...
Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. This vulnerability affects multiple...
Store XSS in Widgets and pages
Description I noticed that you filtered the comment very carefully. But there are still some parts you missed Proof of Concept 1 .Login with admin 2 .Go to "https://demo.instantcms.io/admin/widgets" 3 . Insert payload in Position name and Title test" onmouseover = "alertdocument.cookie 4 .Click...
CVE-2023-40893
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
PT-2023-27687
Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the time parameter at the "/goform/PowerSaveSet" API endpoint. This issue can be exploited, potentially leading to unintended consequences...
CVE-2023-40176 SXSS in the user profile via the timezone displayer
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...
Freedesktop Poppler 安全漏洞
Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Freedesktop Poppler version 22.07.0, which stems from a denial-of-service vulnerability in PDFDoc::savePageAs in PDFDoc.c. The...
CVE-2023-39784
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the savevirtualserdata function...
CVE-2023-39784
Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the savevirtualserdata function...
WordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software DX-auto-save-images Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40671 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID dbea39d50672 Credits Skalucy Required...
WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 2.16.0 Fixed in 2.16.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40668 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 01bc8c014613 Credits Mahesh...
PT-2023-27104
Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the list parameter in the save virtualser data function. This issue may be exploited, potentially leading to unintended consequences. Recommendations For Ten...
WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
Software Save as Image plugin by Pdfcrowd Type Plugin Vulnerable versions = 2.16.0 Fixed in 2.16.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40665 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cfe00b0b6985 Credits Mahe...
PT-2023-7963 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the saveNodeLabel method in the NETGEAR ProSAFE Network Management System, which lacks proper validation of user-supplied data. Thi...
Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Navigate to "WPBot Lite - Setting -...
Exploit for CVE-2023-38646
🛡️ Exploit for CVE-2023-38646 🛡️ Welcome to this powerful exp...
Buffer Overflow
sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...
Buffer Overflow
sgt-puzzles is vulnerable to Buffer Overflow. The vulnerability allows a malicious attacker to craft a save file to cause interger overflow or buffer overflow within the system...