HackerOne: 2M Reports on HackerOne Celebration! - Ability to bulk-submit many reports.

Vulnerability description not provided...

kernel: mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg

In the Linux kernel, the following vulnerability has been resolved: mt76: mt76x02u: fix possible memory leak in mt76x02umcusendmsg Free the skb if mt76ubulkmsg fails in mt76x02umcusendmsg routine...

kernel: mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg

In the Linux kernel, the following vulnerability has been resolved: mt76: mt76x02u: fix possible memory leak in mt76x02umcusendmsg Free the skb if mt76ubulkmsg fails in mt76x02umcusendmsg routine...

PT-2025-26098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the mt76x02u mcu send msg routine has been resolved. The issue occurred when mt76u bulk msg failed, and the skb was not freed. Recommendations At the moment,...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A security vulnerability exists in Acronis Snap Deploy versions prior to 3900. An attacker could exploit the vulnerability to elevate privileges...

WordPress Bulk Price Update for Woocommerce Plugin < 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Bulk Price Update for Woocommerce Type Plugin Vulnerable versions 2.2.2 Fixed in 2.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28665 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bf10a922ae61 Credits Joshu...

CVE-2023-28665

The Woo Bulk Price Update WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the technogetproducts action, which can only be triggered by an authenticated user...

CVE-2023-28665

The CVE-2023-28665 entry concerns the WordPress plugin Woo Bulk Price Update, specifically versions prior to 2.2.2. A reflected cross-site scripting (XSS) vulnerability exists in the techno_get_products action where the attacker-controlled page parameter can trigger the flaw. Exploitation require...

Woo Bulk Price Update < 2.2.2 - Reflected XSS

The plugin does not sanitize and escape escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open...

CVE-2023-28665

The Woo Bulk Price Update WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the technogetproducts action, which can only be triggered by an authenticated user...

CVE-2023-28665: Improper Neutralization of Input During Web Page Generation

The Woo Bulk Price Update WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the technogetproducts action, which can only be triggered by an authenticated user...

CVE-2023-28665

The Woo Bulk Price Update WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the technogetproducts action, which can only be triggered by an authenticated user...

WordPress plugin Woo Bulk Price Update 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Bulk Resize Media Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Bulk Resize Media Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46865 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 10005055fe19 Credits Cat Required privileg...

Exploit for Improper Access Control in Joomla Joomla\!

CVE-2023-23752 Introduction Open-source, Go-based multi-conc...

GSD-2023-1002375 net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

net/usb: kalmia: Don't pass actlen in usbbulkmsg error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

PT-2023-35486

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.273 Description The issue is related to the usb bulk msg function in the Linux Kernel's USB subsystem. It involves passing act len in the error path, which may have potential security implications. The actu...

PT-2023-35450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.169 Description The issue is related to the net/usb: kalmia component in the Linux Kernel. It involves the handling of the act len variable in the error path of the usb bulk msg function. The actual impact...

PT-2023-35471 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue is related to the usb bulk msg function in the Linux Kernel. It is noted that the actual impact and attack plausibility have not yet been proven. The problem was introduced in...

PT-2023-35421 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.95 Description: The issue is related to the usb bulk msg function in the Linux Kernel's USB subsystem. It involves passing act len in the error path, which may have potential security implications. The...