CVE-2023-4713

The CVE-2023-4713 entry concerns IBOS OA 4.5.5 where the addComment function at ?r=weibo/comment/addcomment is vulnerable to SQL injection via the touid parameter. The vulnerability is described as critical, with potential high impact on confidentiality, integrity, and availability. The root caus...

PT-2023-30333

Name of the Vulnerable Software and Affected Versions IBOS OA version 4.5.5 Description A critical issue has been found that affects the addComment function of the file ?r=weibo/comment/addcomment. The manipulation of the touid argument leads to SQL injection. The exploit has been disclosed to th...

IBOS SQL Injection Vulnerability

IBOS is a collaborative office management system. An SQL injection vulnerability exists in IBOS OA version 4.5.5, which stems from the fact that incorrect manipulation of the touid in the addComment function of ?r=weibo/comment/addcomment can lead to SQL injection...

CVE-2022-38550

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-38550

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-38550: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2022-24450 · Jeesns · Jeesns

Name of the Vulnerable Software and Affected Versions: Jeesns version 2.0.0 Description: A stored cross-site scripting XSS issue in the "/weibo/list" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This can lead to the execution of malicious code on the...

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...

omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

GHSA-5C97-GXR3-R368 Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file

Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third-party

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

Authentication flaw

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

CVE-2020-23349

CVE-2020-23349 concerns the Sina Weibo Android SDK 4.2.7, where a vulnerability in the internal activity flow of com.sina.weibo.sdk.share.WbShareTransActivity allows any unexported activities to be started by this component via an intent redirection issue. The impact, as described in connected so...

CVE-2020-23349: Undefined Security Weakness

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...

PT-2022-8659

Name of the Vulnerable Software and Affected Versions Sina Weibo Android SDK version 4.2.7 Description An intent redirection issue was discovered in the Sina Weibo Android SDK, specifically in the com.sina.weibo.sdk.share.WbShareTransActivity component. This issue allows any unexported Activities...