224 matches found
CVE-2022-27854 WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher role via &wpttestpagesubmitbuttoncaption parameter...
CVE-2021-36867 WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher user rights...
CVE-2021-36867
Summary of CVE-2021-36867 (WordPress plugin: Psychological tests & quizzes
CVE-2021-36867 WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher user rights...
sallyhobartalexander.com Cross Site Scripting vulnerability OBB-2481091
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
alexanderbrenninkmeijer.de Improper Access Control vulnerability OBB-2405154
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
virt:kvm_utils security update
hivex 1.3.18-21 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 libguestfs 1.40.2-28.0.1 - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.40.2-28 -...
Critical RCE Flaws in 'PHP Everywhere' Plugin Affect Thousands of WordPress Sites
Critical security vulnerabilities have been disclosed in a WordPress plugin known as PHP Everywhere that's used by more than 30,000 websites worldwide and could be abused by an attacker to execute arbitrary code on affected systems. PHP Everywhere is used to flip the switch on PHP code across...
CVE-2021-23227
Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...
CVE-2021-23227
Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...
search.alexanderstreet.com Cross Site Scripting vulnerability OBB-2241180
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
search.alexanderstreet.com Cross Site Scripting vulnerability OBB-2140094
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for Cross-site Scripting in Seafile
CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested descri...
Exploit for Cross-site Scripting in Sherlockim
CVE-2021-29267 SherlockIM ChatBot XSS Suggested description...
Intel® Server Board Families Advisory
Summary: Potential security vulnerabilities in some Intel® Server Board Families may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12300 Description: Uninitialized pointer in BIOS firmware for...
peteralexander.com.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177864 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Ricoh Driver - Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/exe' class MetasploitModule 'Ricoh Driver Privilege Escalation', 'Description' = %q Various Ricoh printer drivers allow escalation of privilege...
nicolehoopzalexandermoviesa.xsqdooq.cn Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1028646 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Vulnerability in core server (CVE-2019-10164)
Stack-based buffer overflow via setting a password An authenticated user could create a stack-based buffer overflow by changing their own password to a purpose-crafted value. In addition to the ability to crash the PostgreSQL server, this could be further exploited to execute arbitrary code as th...