Authenticated Stored Cross-site Scripting in Shopware

Impact Authenticated Stored XSS in Administration Patches We recommend updating to version 5.7.12. You can get the update to 5.7.12 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/de/changelog-sw5/5-7-12 For older versions you can use the Security...

Hindu Matrimonial Script 安全漏洞

A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/newsletter1.php. No details of the vulnerability are currently available...

Malicious code in azure-purview-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7efea71c1d64f97d0b5b7c52d63da10061cb70b849094b8486015fdc569182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1364 Malicious code in azure-purview-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7efea71c1d64f97d0b5b7c52d63da10061cb70b849094b8486015fdc569182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5530 Malicious code in purview-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f686c9599f3faaf07069d93046b31663340b47ae4ee5cf2c98a9f94336eab37c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purview-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f686c9599f3faaf07069d93046b31663340b47ae4ee5cf2c98a9f94336eab37c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-purview-administration-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad251bd8e2b53e3456bd7b4e683f0cce7e4d2ba5df80e1e3e5978e013ab67eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MaianAffiliate Code Injection Vulnerability Vulnerability

MaianAffiliate is a free, simple but powerful php referral system written in PHP. a security vulnerability exists in MaianAffiliate v.1.0, which stems from the existence of a PHP code injection issue. An authenticated attacker can exploit this vulnerability to obtain RCE through the MaianAffiliat...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain read access to data and modify it.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2021-38578

A flaw was found in edk2. A integer underflow in the SmmEntryPoint function leads to a write into the SMM region allowing a local attacker with administration privileges on the system to execute code within the SMM privileged context. The highest threat from this vulnerability is to data...

CVE-2022-1772

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...

CVE-2022-1772

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...

Cross site scripting

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...

CVE-2022-1772 Google Places Review < 2.0.0 - Admin+ Stored Cross Site Scripting

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...

[SECURITY] Fedora 35 Update: logrotate-3.18.1-4.fc35

The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log...

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website builder by Emlog's personal developer. A security vulnerability exists in Emlog Pro v1.0.4, which stems from a cross-site scripting XSS issue in the Emlog Pro backend administration...

The vulnerability of the Tuleap lifecycle management system, which arises from the failure to take measures to neutralize special elements, allows a perpetrator to forcibly suspend an account or gain control over another account.

The vulnerability of the Tuleap application lifecycle management system exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely and with administrative privileges, to temporarily disable a user accou...

FUDForum Remote Code Execution Vulnerability

FUDForum is a PHP-based open source forum software.FUDForum versions prior to 3.1.2 are vulnerable to remote code execution. An attacker can use this vulnerability to execute remote code with the help of the upload file function of the file management system in the administration control panel...

FUDForum Cross-Site Scripting Vulnerability (CNVD-2022-70052)

FUDForum is a PHP-based forum software. version 3.1.2 of FUDForum contains a cross-site scripting vulnerability. An attacker can exploit this vulnerability to perform cross-site scripting attacks with the help of the pageu title parameter of the page manager in the administration control panel...