23 matches found
USP
USP 機能 このGoプログラムは、udevルールを作成して指定されたペイロード（バイナリまたはスクリプト）の実行をトリガーし、Linuxシステム上に永続化を確立します。2つのトリガーオプションを提供します： USB永続化： USBデバイスが挿入されるたびにペイロードが実行されます。 起動永続化： システム起動中に /dev/random デバイスを利用してペイロードが実行されます。 さらに、確立された永続化を削除するクリーンアップオプションも提供します。 使用方法 1. Goスクリプトをコンパイルします： go build -o usp 2...
CVE-2026-0913
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uspaccess' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user...
CVE-2026-0913 User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uspaccess' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user...
CVE-2026-0913
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uspaccess' shortcode in all versions up to, and including, 20260110 due to insufficient input sanitization and output escaping on user...
WordPress User Submitted Posts plugin <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'uspaccess' Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin User Submitted Posts versions = 20260110...
EUVD-2007-2266
Malware in sbrugna...
Malicious code in trip-component-platform-online-usp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a881b5f34acb08b303ac7f027ae585053ffab51b72cfa79a2bb4b4cbdf3f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-4779
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's uspgallery shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like 'before'. This makes it possible...
PT-2023-11365 · WordPress · User Submitted Posts
Name of the Vulnerable Software and Affected Versions: User Submitted Posts plugin for WordPress versions up to, and including, 20190312 Description: The issue arises from missing file type validation in the usp check images function, allowing unauthenticated attackers to upload arbitrary files t...
teses.usp.br Cross Site Scripting vulnerability OBB-2161305
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
athena.library.usp.ac.fj XSS vulnerability
Open Bug Bounty ID: OBB-654303 Description| Value ---|--- Affected Website:| athena.library.usp.ac.fj Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
digilib.library.usp.ac.fj XSS vulnerability
Open Bug Bounty ID: OBB-563727 Description| Value ---|--- Affected Website:| digilib.library.usp.ac.fj Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
usp-securite.org XSS vulnerability
Vulnerable URL: http://usp-securite.org/rechercher/?q=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2491198 VIP website...
USP FOSS Distribution 1.01(download.php dnld)Remote File Disclosure
USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php ? $file = @$GET'dnld';----+...
Directory traversal
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. dot dot in the dnld parameter...
CVE-2007-2271
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. dot dot in the dnld parameter...
CVE-2007-2271
CVE-2007-2271 is a directory traversal vulnerability affecting Rajneel Lal TotaRam USP FOSS Distribution 1.01. The description in multiple sources notes that remote attackers can read arbitrary files via a .. (dot dot) in the dnld parameter. The issue is documented across NVD and related records,...
CVE-2007-2271
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. dot dot in the dnld parameter...
CVE-2007-2271: Undefined Security Weakness
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. dot dot in the dnld parameter...
USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== USP FOSS Distribution 1.01 dnld Remote File Disclosure Vulnerability ====================================================================== USP FOSS Distribution...