WordPress Users Ultra plugin <= 3.1.0 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress Users Ultra plugin versions = 3.1.0. Solution Deactivate and delete. This plugin has been closed as of March 14, 2022 and is not available for download. This closure is temporary, pending a full review...

CVE-2022-25818

Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution...

CVE-2022-25818

Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution...

UWB stack 缓冲区错误漏洞

Samsung UWB is a wireless technology used by Samsung Samsung mobile devices that allows smartphones to connect and communicate directly with your car. a buffer overflow vulnerability exists in the Samsung UWB stack, which stems from a boundary checking error in the UWB stack. An attacker could...

Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

CVE-2022-20762

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

Cisco Ultra Cloud Core 安全漏洞

Cisco Ultra Cloud Core is a Kubernetes-based solution from Cisco. It provides a common execution environment for Cisco's container-based 5G applications. A security vulnerability exists in Cisco Ultra Cloud Core that allows an authenticated, local attacker to exploit the vulnerability to escalate...

WordPress Ultra Elementor Addons plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultra Elementor Addons plugin versions = 1.0.0. Solution No patched version available...

WordPress Ultra Seven theme <= 1.2.8 - Authenticated Arbitrary Plugin Activation/Deactivation vulnerability

Authenticated Arbitrary Plugin Activation/Deactivation vulnerability discovered by Ex.Mi Patchstack in WordPress Ultra Seven theme versions = 1.2.8. Solution Deactivate and delete. The vendor ignores the vulnerability reports, avoids any conversation...

WordPress Ultra Seven theme <= 1.2.8 - Cross-Site Request Forgery (CSRF) leading to Arbitrary Plugin Activation/Deactivation

Cross-Site Request Forgery CSRF leading to Arbitrary Plugin Activation/Deactivation discovered by Ex.Mi Patchstack in WordPress Ultra Seven theme versions = 1.2.8. Solution Deactivate and delete. The vendor ignores the vulnerability reports avoids any conversation...

WordPress Ultra Seven theme <= 1.2.8 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Lenon Leite Patchstack Red Team project in WordPress Ultra Seven theme versions = 1.2.8. This theme uses a vulnerable piece of code related to previously identified vulnerability - CVE-2021-39317. Solution Deactivate and delete. The vendor ignores...

ultra-sailing.hr Cross Site Scripting vulnerability OBB-2239175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Blackboard Collaborate Ultra Cross-Site Scripting Vulnerability

Blackboard Collaborate Ultra is a Blackboard open source application. Provides an online course management platform. Blackboard Collaborate Ultra 20.02 suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client data. An attacker can...

CVE-2020-25902

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting XSS vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during...

CVE-2020-25902

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting XSS vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during...

Cross site scripting

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting XSS vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during...

CVE-2020-25902

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload can execute in the classroom context, leading to theft of cookies from users who join the class. Multiple sources corroborate the issue across CVE-2020-25902, Red Hat security, CNVD, and ...

CVE-2020-25902

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting XSS vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during...

Blackboard Collaborate Ultra 跨站脚本漏洞

Blackboard Collaborate Ultra is a Blackboard open source application. Provides an online course management platform. Blackboard Collaborate Ultra 20.02 suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client data. An attacker can...

PT-2021-11201 · Blackboard · Blackboard Collaborate Ultra

Name of the Vulnerable Software and Affected Versions: Blackboard Collaborate Ultra version 20.02 Description: The issue concerns a cross-site scripting XSS vulnerability. This vulnerability allows the execution of an XSS payload in the classroom, potentially leading to the theft of cookies from...