WordPress 代码注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code injection vulnerability exists in WordPress Plugin Speed Booster that stems from the product'...

ibus-typing-booster bug fix and enhancement update

An update is available for ibus-typing-booster. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

WordPress Speed Booster Pack plugin <= 4.1.3 - Authenticated Remote Code Execution (RCE) vulnerability

Authenticated Remote Code Execution RCE vulnerability discovered by m0ze in WordPress Speed Booster Pack plugin versions = 4.1.3 to be more precise = 4.2.0-beta. Solution Update the WordPress Speed Booster Pack plugin to the latest available version at least 4.2.0...

The vulnerability of the microprogramming software of NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite and Pro Tri-Band Business WiFi Router (SRR60) models, as well as the microprogramming software of the Outdoor Satellite signal booster (RBS50Y), arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary commands with root privileges.

The vulnerabilities of the microprogrammed software of the NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite and the Pro Tri-Band Business WiFi Router SRR60 models, as well as the microprogrammed signal booster software for outdoor use RBS50Y, are related to the use of pre-installed credential...

Asset CleanUp: Page Speed Booster < 1.3.6.7 - CSRF & XSS

Antony Garand of Sucuri discovered that multiple WordPress plugins were vulnerable to Cross-Site Scripting XSS within the admin panel, which could be exploited by using s Cross-Site Request Forgery CSRF attack...

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by Antony Garand Sucuri in WordPress Asset CleanUp: Page Speed Booster plugin versions = 1.3.6.6. Solution Update the WordPress Asset CleanUp: Page Speed Booster plugin to the latest available version at least 1.3.6.7...

CVE-2018-21064

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...

Buffer overflow

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...

CVE-2018-21064

The CVE-2018-21064 entry concerns Samsung mobile devices running N(7.x)/O(8.x) software, where an array overflow exists in a driver’s input booster (Samsung SVE-2017-11816). The issue is documented across multiple feeds, with high-severity metrics (CVSS v3.1 base score 9.8, impact on confidential...

CVE-2018-21064

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...

The vulnerability of the command-line interface of the FortiExtender signal booster software arises from insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of the command-line interface of the FortiExtender signal booster software relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Woocommerce Jetpack <= 3.7.0 - XSS

The Booster for WooCommerce WordPress plugin was affected by a XSS security vulnerability...

1000 Likes Booster Pro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Likes Booster Pro published at the 'play' market has multiple vulnerabilities...

Real Followers Booster - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Real Followers Booster published at the 'play' market has multiple vulnerabilities...

Follow Brasi -Follower Booster - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Follow Brasi -Follower Booster published at the 'play' market has multiple vulnerabilities...

Dr. Cleaner - Memory Booster - Dangerous filesystem permissions, MIT license, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Cleaner - Memory Booster published at the 'play' market has multiple vulnerabilities...

Root Booster - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Root Booster published at the 'play' market has multiple vulnerabilities...

Equalizer & Bass Booster - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Equalizer & Bass Booster published at the 'play' market has multiple vulnerabilities...

Volume Booster Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Volume Booster Pro published at the 'play' market has multiple vulnerabilities...

Turbo Booster (Speed up) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Turbo Booster Speed up published at the 'play' market has multiple vulnerabilities...