CVE-2022-1672

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...

Cross site scripting

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting...

CVE-2022-1933 CDI < 5.1.9 - Reflected Cross-Site-Scripting

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting...

CVE-2022-25801

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

CVE-2022-25801

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

CVE-2022-25801

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

Server side request forgery (ssrf)

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

CVE-2022-25801

Vulnerability : CVE-2022-25801 affects Best Practical RT for Incident Response (RTIR). Affected versions are RTIR &lt; 4.0.3 and RTIR 5.x

CVE-2022-25801

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

PT-2022-6619 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

The vulnerability of the SEPCOS Single Package control and protection relay software allows a intruder to modify user credentials and permissions without authentication.

The vulnerability of the SEPCOS Single Package control and protection relay software is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to modify user credentials and permissions without authentication...

The vulnerability of the SEPCOS Single Package control and protection system from Secheron SEPCOS allows a intruder to trigger a system reboot.

The vulnerability of the SEPCOS Single Package control and protection relay software is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a system reboot by executing the JS functi...

PT-2022-5412 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 versions 3.1.16 through 3.3.0 Description: A denial of service issue exists in the web server hashFirst functionality. This can be triggered by a specially-crafted network request, allowing an attacker to cause a denial of...

MAL-2022-5768 Malicious code in restli-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d04a6e9f6ff9f21ef9bd2bd2b06e04147ad6aaaed595fce58c6f3649f39693d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7182 Malicious code in wjakcgsxftuyhbir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34514f5bab24d7af7c544ff4f2cdb120adb9aba60bbafb740dd2dd4de6244c5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7277 Malicious code in xhnedzawcukgpfjv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a39821ab671a48b431878eb07bed325ec12db5a013141dcb24c567dd7047a610 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5876 Malicious code in ruzkcploymjdibah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f04ecc7e90587dabc5524ac7d30c36f8cb07bb6901019669f0821dd15ed1155 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5541 Malicious code in qemixknbaocwkful (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ffe0ca3466a37024c4b8f7d7a77c225991e091d4ee14b59201f7093baa11c99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1476 Malicious code in bc-image-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9a3588bff533b8322b9e36266236764d4c1404bc04e9480315d04aa9a292a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4335 Malicious code in lnuhfadctpvbwrsj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0fc4102a37e0cee8ba8d5a6e17a44aa54e889337064af2ca9aabce028b51bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...