CVE-2020-7794

This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function installrequestedModule...

Denial of Service Vulnerability in LoveFast Router

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Denial of Service Vulnerability in LoveFast Router (CNVD-2021-03424)

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Buns Command Injection Vulnerability

Buns is a Javascript-based application for executing shell commands with cached output by the individual developer of Buns. Buns all versions suffers from a command injection vulnerability in lib/index.js in the exported function installrequestdmodule at line 678...

Denial of Service Vulnerability in AIFUL Router iK-Q80

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. Denial of service vulnerability exists ...

DEBIAN-CVE-2020-35111

When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently leaked their IP address. This vulnerability affects Firefox...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

Cross site scripting

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

The CVE-2020-35946 issue affects the WordPress plugin All in One SEO Pack up to version 3.6.2. It arises from unsanitized input in the SEO Description and SEO Title fields, enabling stored XSS from a Contributor and affecting post pages in the admin area. The documented impact is stored XSS; expl...

PT-2021-11878

Name of the Vulnerable Software and Affected Versions: All in One SEO Pack plugin versions prior to 3.6.2 Description: The issue is related to unsanitized input in the SEO Description and Title fields, which can lead to stored XSS when a Contributor provides malicious input. Recommendations: For...

CVE-2020-35946: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress All in One SEO Pack plugin prior to version...

CVE-2020-35926: Use of Insufficiently Random Values

An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator even ChaCha to return all zeroes because integer truncation was mishandled...

CVE-2020-5807

An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...

PayloadsAllTheThings

It is an offensive tool for general-purpose payloads. The repository lpker123/PayloadsAllTheThings contains various payloads for different purposes, but no specific exploit or vulnerability is mentioned. The provided code snippet is a funding.yml file, which lists supported funding platforms for...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...