WordPress Booking Ultra Pro Plugin <= 1.1.12 is vulnerable to Broken Access Control

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.12 Fixed in 1.1.13 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32601 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 63ee5e2f399e Credits Badromance 1337 Required...

AMD Secure Processor和AMD System Management Unit 安全漏洞

The AMD System Management Unit SMU and AMD Secure Processor ASP are both products of UltraMicroelectronics AMD, Inc.The AMD System Management Unit is a system management unit.The AMD Secure Processor is a standalone AMD Secure Processor is a standalone ARM Coretex-A5 chip. A security vulnerabilit...

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32511 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 62d0b4def25b Credits thiennv Require...

AMD Secure Processor和AMD System Management Unit 安全漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor and AMD System Management Unit. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor...

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32236 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 00fb8bbc9f88 Credits Team WeBoB...

Malicious code in py-candyultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b214c4ec68d6647723a41f90415618abdfde81d1f0e382bfa5fc055639c3de61 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46816 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2d94304ab1c4 Credits Nguyen Xuan Chien...

SUSE CVE-2016-9942

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed leng...

AMD Secure Processor(ASP) 输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. AMD Secure Processor ASP suffers from a security vulnerability that stems from inadequate input validation and could allow an attacker with a malicious BIOS to potentially cause a denial of service...

AMD Secure Processor 输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor. An attacker could exploit this vulnerability to cause an integer overflow, resulting in a denial of service...

@ultra-node/electron-engine (>=0.1.1, <=0.1.14) potentially affected by CVE-2022-36077 via electron (20.0.0)

electron NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - @ultra-node/electron-engine =0.1.1, =0.1.14 Source cves: CVE-2022-36077 Source advisory: OSV:GHSA-P2JH-44QJ-PF2V...

CVE-2021-36855

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36854

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36854

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36855

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

Cross site request forgery (csrf)

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36855

CVE-2021-36855 affects the WordPress Booking Ultra Pro plugin versions 1.1.4 where available; Patchstack notes that no patched version may exist, while PT Security recommends updating or restricting access. Several feeds corroborate the vulnerability, but explicit exploit details are not provide...

CVE-2021-36855 WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36854

CVE-2021-36854 affects WordPress Booking Ultra Pro plugin versions up to 1.1.4. The root cause is missing CSRF checks in multiple areas, enabling CSRF to trigger actions by authenticated users. Impact per sources is user action changes with potential confidentiality/integrity concerns; exploitati...