Lucene search
+L

116 matches found

CNVD
CNVD
added 2022/04/27 12:00 a.m.28 views

WordPress plugin amr users跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin amr users version 4.59.4 has a cross-site scripting vulnerability that stems from a...

4.8CVSS1.8AI score0.00702EPSS
SaveExploits2References1
OSV
OSV
added 2022/04/25 4:16 p.m.9 views

CVE-2022-1094

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00702EPSS
SaveExploits2References1
NVD
NVD
added 2022/04/25 4:16 p.m.20 views

CVE-2022-1094

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00702EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2022/04/25 3:51 p.m.11 views

CVE-2022-1094 Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.7AI score0.00702EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/04/25 12:00 a.m.11 views

WordPress plugin amr users 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin amr users version 4.59.4 has a cross-site scripting vulnerability that stems from a...

4.8CVSS5.2AI score0.00702EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2022/04/25 12:00 a.m.10 views

PT-2022-13656 · WordPress · Amr Users

Name of the Vulnerable Software and Affected Versions: amr users WordPress plugin versions prior to 4.59.4 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and...

4.8CVSS4.5AI score0.00702EPSS
SaveExploits2References4
WPVulnDB
WPVulnDB
added 2022/04/04 12:00 a.m.19 views

Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in the "Name of list" field in the User Lists...

4.8CVSS2.7AI score0.00702EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2022/04/04 12:00 a.m.132 views

Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in the "Name of list" field in the User Lists Overview ...

4.8CVSS0.6AI score0.00702EPSS
SaveExploits2
Patchstack
Patchstack
added 2022/03/28 12:00 a.m.38 views

WordPress amr users plugin <= 4.59.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Ankur Bakre in WordPress amr users plugin versions = 4.59.3. Solution Update the WordPress amr users plugin to the latest available version at least 4.59.4...

4.8CVSS1.6AI score0.00702EPSS
SaveExploits2References3Affected Software1
Openbugbounty
Openbugbounty
added 2021/12/31 4:22 a.m.17 views

amr-giza.com Cross Site Scripting vulnerability OBB-2317475

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2021/04/29 3:15 p.m.7 views

CVE-2021-28899

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...

7.5CVSS7.1AI score0.01094EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/29 2:08 p.m.41 views

CVE-2021-28899

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...

8.1AI score0.01094EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/09 12:00 a.m.36 views

VLC < 1.1.12 DoS

A denial of service DoS vulnerability exists in VLC media player before 1.1.12. Allows remote attackers to cause a denial of service crash via a long string in an amr file. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid138341; scriptversion"1.5";...

4.3CVSS5.9AI score0.05112EPSS
SaveExploits2References2
myhack58
myhack58
added 2018/07/11 12:00 a.m.364 views

Ethernet place more than one contract there is unlimited additional high-risk vulnerabilities-vulnerability warning-the black bar safety net

Recently, the Internet broke the AMR contract in the presence of high-risk security risk trading, through the study found that the AMR contract in the presence of batch transfer overflow vulnerability: when the contract to achieve the batch transfer function, it is easy to in the calculation of t...

SaveExploits0
HackRead
HackRead
added 2018/03/30 5:23 p.m.42 views

Hackers take over power billing records of Indian state; demand ransom

By Uzair Amir The AMR system automatic meter reading system of Uttar Haryana This is a post from HackRead.com Read the original post: Hackers take over power billing records of Indian state; demand ransom...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.25 views

VLC Media Player 1.1.11 - (.amr) Denial of Service PoC

No description provided by source. !/usr/bin/perl Exploit Title: VLC media player v1.1.11 .amr Local Crash PoC Date: 04.01.2012 Author: Fabi@habsec [email protected] Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe Version: 1.1.11 Tested on: Windows 7 x86...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/01/23 12:00 a.m.21 views

VLC Media Player '.amr' File Denial of Service Vulnerability - Windows

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS6.8AI score0.05112EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2012/01/23 12:00 a.m.39 views

VLC Media Player '.amr' File Denial of Service Vulnerability (Windows)

The host is installed with VLC Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayeramrdosvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player '.amr' File Denial of Service Vulnerability Windows Authors: Antu Sanadi Copyright:...

4.3CVSS6.6AI score0.05112EPSS
SaveExploits2References3
NVD
NVD
added 2012/01/20 5:55 p.m.26 views

CVE-2012-0904

VLC media player 1.1.11 allows remote attackers to cause a denial of service crash via a long string in an amr file...

4.3CVSS6.4AI score0.05112EPSS
SaveExploits2References5
Prion
Prion
added 2012/01/20 5:55 p.m.21 views

Code injection

VLC media player 1.1.11 allows remote attackers to cause a denial of service crash via a long string in an amr file...

4.3CVSS7AI score0.05112EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder