PT-2022-24588 · WordPress · Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection

Name of the Vulnerable Software and Affected Versions: The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin versions prior to 7.24 Description: The issue is related to a lack of proper authorization and CSRF protection in an AJAX action. This allows...

AMI MegaRAC 授权问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC has an authorization issue...

LinkedIn: Ad Account Takeover

Vulnerability description not provided...

Veritas Technologies NetBackup Flex Scale 授权问题漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. An authorization issue vulnerability exists in Veritas NetBackup Flex Scale 3.0 and...

Zenario CMS 授权问题漏洞

Zenario CMS is a Zenario open source application . Provides a web-based content management system. An authorization issue vulnerability exists in Zenario CMS version 9.3.57595. An attacker exploited the vulnerability to cause session repair...

Realtek RTL8111FP-CG License Issue Vulnerability

The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...

Realtek RTL8111FP-CG 安全漏洞

The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...

htsjdk 安全漏洞

htsjdk is a samtools open source a Java API for high-throughput sequencing data HTS format . An authorization issue exists in htsjdk 3.0.1 and earlier versions com.github.samtools.The vulnerability is due to the createTempDir function in util/IOUtil, which creates a temporary file in a directory...

WordPress plugin WP User Frontend 授权问题漏洞

WP User Frontend is a wordpress plugin for user frontend posting and submission. An authorization issue vulnerability exists in WordPress WP User Frontend versions prior to 3.5.29. The vulnerability stems from improper privilege management and can be exploited by an attacker to create accounts wi...

PortlandLabs Concrete CMS 授权问题漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A security vulnerability exists in Concrete CMS concrete5 versions prior to 8.5.10 and versions 9.0.0 through 9.1.2, which stems from a new session ID not being issued...

WordPress Plugin reSmush.it Image Optimizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

Intel SDP Tool 授权问题漏洞

Intel SDP Tool is a server debugging and configuration tool from Intel Corporation USA. A security vulnerability exists in Intel SDP Tool versions prior to 3.0.0, which stems from incorrect authentication and could allow unauthenticated users to potentially achieve information disclosure by...

CVE-2022-3793

An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to...

UBUNTU-CVE-2022-3793

An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to...

GitLab 12.6 < 15.3.5 / 15.4 < 15.4.4 / 15.5 < 15.5.2 (CVE-2022-3793)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a...

Cisco Firepower Management Center 安全特征问题漏洞

Cisco Firepower Management Center FMC is the next generation firewall management center software from Cisco. Cisco Firepower Management Center FMC Software suffers from a security signature issue vulnerability that stems from a lack of authorization for certain resources in its web-based manageme...

CVE-2022-3793

GitLab CE/EE vulnerability CVE-2022-3793: improper authorization allows reading variables set in a GitLab CI/CD config file by an attacker without access. Affected: all 14.4 up to before 15.3.5; 15.4 up to before 15.4.4; 15.5 up to before 15.5.2. Root cause: insufficient access control around CI/...

CVE-2022-3793

An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to...

CVE-2022-3819

An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a malicious users to set emojis on internal notes they don't have access to...

Cisco Firepower Management Center 授权问题漏洞

Cisco Firepower Management Center FMC is the United States Cisco Cisco company's new generation of firewall management center software. Cisco FirePOWER Software, Cisco Firepower Management Center FMC Software, and Cisco Next-Generation Intrusion Prevention System NGIPS Software are vulnerable to ...