CVE-2022-42901

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19...

CVE-2022-42900

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19 for Bentley Vi...

WordPress Page View Count plugin <= 2.5.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin settings reset was discovered by Mika Patchstack Alliance in the WordPress Page View Count plugin versions = 2.5.5. Solution Update the WordPress Page View Count plugin to the latest available version at least 2.5.6...

Page View Count < 2.5.6 - Settings Reset via CSRF

The plugin does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack...

CVE-2022-42901: Out-of-bounds Read

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19...

CVE-2022-42899: Out-of-bounds Read

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and...

CVE-2022-42900: Out-of-bounds Read

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19 for Bentley Vi...

Bentley Systems MicroStation and Bentley View buffer error vulnerabilities

Bentley Systems MicroStation and Bentley View are both products of Bentley Systems, Inc.MicroStation is a Cad software platform for 2D and 3D design and drafting.Bentley View is a free viewer.... A buffer error vulnerability exists in MicroStation versions prior to 10.17.01.58 and Bentley View...

Vulnerabilities fixed in Bentley View and MicroStation

Vulnerabilities have been fixed in Bentley View and MicroStation. The vulnerabilities allow a malicious party to access system data and to execute arbitrary code under the user's privileges. To do this, the malicious party must trick the victim into running open a rogue SKP, XMT, or FBX file. It ...

Bentley Systems MicroStation and Bentley View buffer error vulnerabilities

Bentley Systems MicroStation and Bentley View are both products of Bentley Systems, U.S.A. MicroStation is a Cad software platform for 2D and 3D design and drafting.Bentley View is a freeware viewer. A buffer error vulnerability exists in MicroStation versions prior to 10.17.01.58 and Bentley Vie...

Bentley Systems MicroStation and Bentley View buffer error vulnerabilities

Bentley Systems MicroStation and Bentley View are both products of Bentley Systems, U.S.A. MicroStation is a Cad software platform for 2D and 3D design and drafting.Bentley View is a freeware viewer. A buffer error vulnerability exists in MicroStation versions prior to 10.17.01.58 and Bentley Vie...

PT-2022-26651 · Bentley · Microstation +1

Name of the Vulnerable Software and Affected Versions: MicroStation versions prior to 10.17.01.58 Bentley View versions prior to 10.17.01.19 Description: The issue is related to out-of-bounds read problems that occur when opening specially crafted FBX files. This could potentially lead to...

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

PT-2022-25823

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite version 8.8.15 Description The issue allows an attacker to trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string at the URL "/h/calendar"...

CVE-2022-41351: Improper Neutralization of Input During Web Page Generation

In Zimbra Collaboration Suite ZCS 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string instead of default value of 10...

Online Pet Shop We App SQL Injection Vulnerability

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Online Pet Shop We App, which stems from an SQL injection issue in the id parameter of the /admin/?page=orders/vieworder location...

Online Pet Shop We App SQL Injection Vulnerability

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Online Pet Shop We App, which stems from an SQL injection issue in the id parameter of the /admin/?page=orders/vieworder location...

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

PT-2022-25848

Name of the Vulnerable Software and Affected Versions Online Pet Shop We App version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=orders/view order" API endpoint. Recommendations For Online Pet...