PT-2022-30158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the handling of sysclk setting in the xlnx formatter pcm component of the ASoC Audio System on Chip driver. The actual impact and attack plausibility have not yet been...

th23 Social <= 1.2.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in the plugin's settings...

CVE-2022-27822

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

CVE-2022-27822

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

CVE-2022-27822

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

Information disclosure

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

CVE-2022-27822

CVE-2022-27822 describes an information-disclosure vulnerability in Samsung SMR (system patch package). Prior to SMR Apr-2022 Release 1, the ril property setting could expose EF_RUIMID without permission. Documented across multiple feeds (NVD entries and security notices) with affected product sc...

PT-2022-18610

Name of the Vulnerable Software and Affected Versions ril property setting versions prior to SMR April-2022 Release 1 Description The issue allows unauthorized access to the EF RUIMID value due to an information exposure vulnerability in the ril property setting. Recommendations For versions prio...

Multi Store Inventory Management System 1.0 Account Takeover Vulnerability

Exploit Title: Multi Store Inventory Management System - Account Takeover Unauthenticated Exploit Author: Saud Alenazi Vendor Homepage: https://www.bdtask.com/ Software Link: https://www.campcodes.com/projects/php/complete-multi-store-inventory-management-system-in-php-mysql/ Version: 1.0 Tested...

Pixelimity 跨站脚本漏洞

Pixelimity is an open source PHP-based CMS Content Management System. A security vulnerability exists in Pixelimity 1.0 that originates from cross-site scripting via the site description field in pixelimity/admin/setting.php...

WordPress Optimole plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress plugin Optimole version 3.3.2 has a cross-site scripting vulnerability that stems from the failure of image optimization and...

CVE-2022-26188

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost...

WordPress plugin Optimole 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress plugin Optimole version 3.3.2 has a cross-site scripting vulnerability that stems from the failure of image optimization and...

PT-2022-17714

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7570 B20200620 Description A command injection issue was discovered via the "/setting/NTPSyncWithHost" API endpoint. This allows for potential exploitation. No information is provided about the estimated number o...

CVE-2022-26188: Improper Neutralization of Special Elements used in a Command

TOTOLINK N600R V4.3.0cu.7570B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost...

CVE-2022-1004

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...

SUSE-SU-2022:0909-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 - CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 bsc1194640...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

CVE-2022-26246: Improper Neutralization of Input During Web Page Generation

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...