355 matches found
CVE-2022-36358 WordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in SEO Scout plugin = 0.9.83 at WordPress allows attackers to trick users with administrative rights to unintentionally change the plugin settings...
CVE-2022-36358
The CVE-2022-36358 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress SEO Scout plugin (versions ≤ 0.9.83). The underlying issue is a lack of CSRF protection that could allow an attacker to trick an administrator into changing plugin settings, potentially impacting...
WordPress plugin SEO Scout 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
SEO Scout <= 0.9.83 - Settings Update via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
WordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to plugin settings change discovered by ptsfence Patchstack Alliance in WordPress SEO Scout plugin versions = 0.9.83. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This...
Fedora: Security Advisory for golang-github-liamg-scout (FEDORA-2022-ea8f4e232d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-github-liamg-scout-0.15.1-5.fc36
A lightweight URL fuzzer and spider: Discover a web server's undisclosed file s, directories and VHOSTs...
Fedora: Security Advisory for golang-github-liamg-scout (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-liamg-scout-0.12.0-5.fc35
A lightweight URL fuzzer and spider: Discover a web server's undisclosed file s, directories and VHOSTs...
GHSA-G53G-Q539-93CV Server-Side Request Forgery in scout-browser
Pypi package scout-browser GitHub repository clinical-genomics/scout prior to v4.52 is vulnerable to server-side request forgery. An attacker could make the application perform arbitrary requests to steal cookies, request access to private areas, or lead to cross-site scripting...
Server-Side Request Forgery in scout-browser
Pypi package scout-browser GitHub repository clinical-genomics/scout prior to v4.52 is vulnerable to server-side request forgery. An attacker could make the application perform arbitrary requests to steal cookies, request access to private areas, or lead to cross-site scripting...
CVE-2022-1592
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
CVE-2022-1592 Server-Side Request Forgery in scout in clinical-genomics/scout
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
CVE-2022-1592 Server-Side Request Forgery in scout in clinical-genomics/scout
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
PT-2022-13989
Name of the Vulnerable Software and Affected Versions scout versions prior to 4.42 Description The issue allows an attacker to make the application perform arbitrary requests, potentially leading to the theft of cookies, access to private areas, or cross-site scripting xss. Recommendations For...
Clinical-Genomics Scout 代码问题漏洞
Scout is a platform for analyzing VCFs and enabling collaboration to solve rare diseases faster. A security vulnerability exists in Clinical-Genomics Scout versions prior to 4.42 that stems from the presence of server-side request forgery in the application. An attacker exploiting this...
Path Traversal in scout-browser
Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...
GHSA-694V-63FQ-FMR4 Path Traversal in scout-browser
Scout is a Variant Call Format VCF visualization interface. The Pypi package scout-browser is vulnerable to path traversal due to sendfile call in versions prior to 4.52...
Server-Side Request Forgery in scout
Description Server-Side Request Forgery in remotecors Proof of Concept GET /remote/cors/http://:8888 HTTP/1.1 Host: localhost:8000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:100.0 Gecko/20100101 Firefox/100.0 Accept:...
