613 matches found
PT-2023-24806 · Tencent · Tim +1
Name of the Vulnerable Software and Affected Versions: Tencent QQ versions 9.7.8.29039 and earlier TIM versions 3.4.7.22084 and earlier Description: The issue arises from the failure of QQProtect.exe and QQProtectEngine.dll to validate pointers from inter-process communication, leading to a...
CVE-2023-34312
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition...
Argon Dashboard 2 SQL Injection
==================================================================================================================================== | Title : Argon Dashboard 2 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 109.064-bit | |...
CVE-2023-26011
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...
CVE-2023-26011
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...
CVE-2023-26014
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Minify HTML plugin = 2.1.7 vulnerability...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Minify HTML plugin = 2.1.7 vulnerability...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...
CVE-2023-26011 WordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...
CVE-2023-26011
CVE-2023-26011 is a CSRF vulnerability in the WordPress plugin Read More Excerpt Link (tim Eckel) for versions
CVE-2023-26011 WordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Read More Excerpt Link plugin = 1.6 versions...
CVE-2023-26014
CVE-2023-26014 concerns the WordPress Minify HTML Plugin, affected in versions <= 2.1.7. The vulnerability is CSRF (Cross-Site Request Forgery) that can be exploited without authentication. Patchstack’s entry states the issue is fixed in version 2.1.8. The Initial Description confirms the CSRF...
CVE-2023-26014 WordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tim Eckel Minify HTML plugin = 2.1.7 vulnerability...
PT-2023-20426 · Unknown · Tim Eckel Minify Html Plugin
Name of the Vulnerable Software and Affected Versions: Tim Eckel Minify HTML plugin versions = 2.1.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2023-20423 · Unknown · Tim Eckel Read More Excerpt Link
Name of the Vulnerable Software and Affected Versions: Tim Eckel Read More Excerpt Link plugin versions = 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
CVE-2022-47606
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tim Stephenson WP-CORS plugin = 0.2.1 versions...
CVE-2022-47606
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tim Stephenson WP-CORS plugin = 0.2.1 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tim Stephenson WP-CORS plugin = 0.2.1 versions...
CVE-2022-47606
CVE-2022-47606 refers to a stored XSS in the WordPress plugin WP-CORS by Tim Stephenson, affecting versions up to and including 0.2.1. The vulnerability requires admin+ privileges and response handling that allows stored malicious input to be rendered in the admin-facing context. The NVD entry li...
CVE-2022-47606 WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tim Stephenson WP-CORS plugin = 0.2.1 versions...