1496 matches found
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
Command injection
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
PT-2023-2216 · Sophos · Sophos Web Appliance
Name of the Vulnerable Software and Affected Versions: Sophos Web Appliance versions prior to 4.3.10.4 Description: A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance allows administrators to execute arbitrary code. The vulnerability is related to the...
How to avoid potentially unwanted programs
If youve ever downloaded software onto your computer, chances are youve unknowingly cluttered your machine with PUPs. Heres what you need to know about these sneaky programs. What are PUPs? If you're thinking baskets of doe-eyed baby dogs, then you're sadly mistaken. PUPs is the acronym for...
How to Unhide the Restore Reason Page
Purpose This article documents how to unhide the Reason tab in the Restore Wizard after the "Do not show me this page again " option has been checked, causing the Reason tab to no longer appear during future restores. Solution The "Do not show me this page again" setting and other user-specific U...
PVS - Imaging Wizard fails when creating Vdisk. Error after restart 'Imaging wizard did not restart'
When attempting to create a vDisk, the Imaging Wizard gets as far as requiring a reboot, but after the restart returns the error 'Imaging wizard did not restart'...
ASB-A-258422561
In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
[SECURITY] Fedora 37 Update: plasma-welcome-5.27.1-1.fc37
A Friendly onboarding wizard for Plasma...
SUSE CVE-2014-3942
The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to execute arbitrary PHP code via a serialized PHP object...
HackerOne: HTML injection that may lead to XSS on HackerOne.com through H1 Triage Wizard Chrome Extension
An HTML injection vulnerability was discovered on HackerOne.com through the H1 Triage Wizard Chrome Extension. An attacker could inject malicious code into the triage questionnaire modal, potentially leading to the compromise of confidential information or impacting its integrity...
The vulnerability of the Live Update Wizard component of EMCO software products lies in the ability to load code without verifying its integrity. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code.
The vulnerability of the Live Update Wizard component of EMCO software products lies in the ability to load code without verifying its integrity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
Cross site scripting
A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setupwizardinterface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The...
CVE-2022-4905 UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting
A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setupwizardinterface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The...
PT-2023-15913 · Unknown · Udx Stateless Media Plugin
Name of the Vulnerable Software and Affected Versions: UDX Stateless Media Plugin version 3.1.1 Description: A vulnerability was found in the UDX Stateless Media Plugin. It affects the setup wizard interface function of the file lib/classes/class-settings.php. The manipulation of the settings...
WordPress plugin UDX Stateless Media Plugin 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin UDX Stateless Media Plugin...
CVE-2023-24346
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wanconnected parameter at /goform/formEasySetupWizard3...
U.K. and U.S. Sanction 7 Russians for TrickBot, Ryuk, and Conti Ransomware Attacks
In a first-of-its-kind coordinated action, the U.K. and U.S. governments on Thursday levied sanctions against seven Russian nationals for their affiliation to the TrickBot, Ryuk, and Conti cybercrime operation. The individuals designated under sanctions are Vitaly Kovalev aka Alex Konor, Bentley,...
PT-2023-19402 · Trendnet · Trendnet Wireless Ac Easy-Upgrader Tew-820Ap
Name of the Vulnerable Software and Affected Versions: TrendNet Wireless AC Easy-Upgrader TEW-820AP version 1.0R, firmware version 1.01.B01 Description: A stack overflow issue was discovered, allowing attackers to execute arbitrary code via a crafted payload. The issue is exploited through the...