8164 matches found
CVE-2025-23666
CVE-2025-23666 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Management-screen-droptiles (affected versions: from n/a through 1.0). Root cause: Improper neutralization of input during web page generation . Public references in the provided documents consistently identi...
CVE-2025-23666: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cxc-sawa Management-screen-droptiles cxc-sawa allows Reflected XSS.This issue affects Management-screen-droptiles: from n/a through = 1.0...
WordPress plugin Management-screen-droptiles 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...
Creating a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude
I just created a Windows 10/11 application that takes square screen captures. I did zero coding myself but used Visual Studio Code, Cline, OpenRouter, and Claude. I got the idea by watching a video on so-called Vibe programming by a YouTuber named Memory. I have zero Windows programming experienc...
WordPress Management-screen-droptiles plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Management-screen-droptiles versions = 1.0...
[SECURITY] Fedora 41 Update: vim-9.1.1202-1.fc41
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Huawei HarmonyOS lock screen module privilege management vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege management vulnerability exists in the Huawei HarmonyOS lock screen module, which can be exploited by an attacker to compromise confidentiality...
CVE-2024-44179
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen...
CVE-2024-44179
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen...
Apple macOS 信息泄露漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a restriction of options on locked devices, which could lead an attacker to read contact numbers from the lock...
CVE-2024-44179: Exposure of Sensitive Information to an Unauthorized Actor
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen...
The vulnerability of the Mozilla Firefox Focus browser, related to bypassing the authentication process through an alternative path or channel, allows attackers to circumvent screen lock settings.
The vulnerability of the Mozilla Firefox Focus browser relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent screen lock settings...
uberAgent on MacOS displays splash screen at login, fails to recognize license file
uberAgent on MacOS displays a splash screen at login advising users: "Evaluation Version. Not for Production Use." uberAgent.log will show failure to read the licensing file. LicenseCheck,Starting license verification LicenseCheck,Copying license files from to cache LicenseCheck,Reading license...
CVE-2024-58046
Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Medium: libglvnd
Issue Overview: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server...
Linux Distros Unpatched Vulnerability : CVE-2023-24626
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a...
Linux Distros Unpatched Vulnerability : CVE-2023-5380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration a multi-screen setup with multip...
CVE-2024-58046
Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...