WordPress Responsive Blocks plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Silver Asu in WordPress Plugin Responsive Blocks versions = 2.2.0...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2026-27199 via werkzeug (2.0.1)

werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...

activedirectoryenum (>=0.4.0, <=0.4.6), airiam (>=0.1.2, <=0.1.8) +29 more potentially affected by CVE-2026-21860 via werkzeug (1.0.0)

werkzeug PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.3.0, =0.0.3, =1.3.0, =1.0.0, =1.0.1, =0.8.0, =0.1.1, =1.0.0, =2.0.0b4, =2.1.0b1 - ors3handler 0.0.31 and...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2026-21860 via werkzeug (2.0.1)

werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...

CVE-2024-8000 On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade (ASU) restar

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being installed after an Accelerated Software Upgrade ASU restart. Note: supplicants with pending...

PT-2025-9705

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description The issue occurs on platforms running Arista EOS with 802.1X configured, where certain conditions may cause a dynamic ACL received from the AAA server to only install the first line of the...

Use of Weak Hash

Overview asu is an An image on demand server for OpenWrt based distributions Affected versions of this package are vulnerable to Use of Weak Hash which allows the ASU server to be polluted with malicious firmware images. Due to the low entropy employed when only 12 characters are used from the...

CVE-2024-54143

openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-256 hashes to only 12 characters. This significantly reduces entropy, making it feasible for an attacker to generate collisions. By exploiting this, a previously built malicious...

PT-2024-9271

Name of the Vulnerable Software and Affected Versions: OpenWrt versions prior to 920c8a1 Description: The issue is related to the Attended SysUpgrade feature of OpenWrt, which allows for the injection of malicious firmware. This is due to a combination of command injection in the ImageBuilder...

CVE-2024-54143: Use of Weak Hash

openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-256 hashes to only 12 characters. This significantly reduces entropy, making it feasible for an attacker to generate collisions. By exploiting this, a previously built malicious...

asu-tech.ed.jp Improper Access Control vulnerability OBB-3843443

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

public.asu.edu Cross Site Scripting vulnerability OBB-3842835

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

activedirectoryenum (>=0.4.0, <=0.4.6), airiam (>=0.1.2, <=0.1.8) +29 more potentially affected by CVE-2023-46136 via werkzeug (1.0.0)

werkzeug PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.3.0, =0.0.3, =1.3.0, =1.0.0, =1.0.1, =0.8.0, =0.1.1, =1.0.0, =2.0.0b4, =2.1.0b1 - ors3handler 0.0.31 and...

.NET components in the DoS

The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems like Triangle MicroWorks DNP3 Source Code Library in Schneider Electric Saitel DR RTU control platforms lies in the fact that the operation results are stored outside of the...

Security Bulletin: Several System x and Flex Systems products are affected by vulnerabilities in OpenSSL (CVE-2013-6449, CVE-2013-4353 and CVE-2013-6450)

Summary Security vulnerabilities discovered in OpenSSL have been fixed in recent releases of several IBM System x and Flex Systems products. You may have already applied the updates containing these fixes. Vulnerability Details Abstract Security vulnerabilities discovered in OpenSSL have been fix...

DNP3 Source Code Library DoS

The vulnerability of .NET components in the communication protocol library used for connecting components of ASU systems in the Triangle MicroWorks DNP3 Source Code Library platform for managing public distribution and transmission networks, such as Schneider Electric Saitel DP RTU Remote Termina...

cpdweb.biodesign.asu.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1019883 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cpdweb.biodesign.asu.edu...

asu.edu.eg XSS vulnerability

Open Bug Bounty ID: OBB-594473 Description| Value ---|--- Affected Website:| asu.edu.eg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

asu.edu XSS vulnerability

Vulnerable URL: http://www.asu.edu/courses/rel394ae/flashdetection.swf?flashContentURL=javascript:alert%27openbugbounty%27// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2557 VIP...

Command injection

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...