1192 matches found
Turning an OBD-II reader into a USB / NFC attack tool
One of my favourite sorts of hardware hacking is making a device do something it was never intended for. It's creative, disruptive, and fun. Everyone has their own way of going about things. Different methodologies, habits, and skill sets mean that approaches will be diverse. This is how I work...
OPENSUSE-SU-2020:0003-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 68.3esr MFSA 2019-38 bsc1158328 Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 - CVE-2019-13722: Fixed a stack corruption due to incorrect number of...
Security update for MozillaThunderbird (important)
openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:0003-1 Rating: important References: Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for MozillaThunderbird fixes the...
CVE-2019-16178
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
Cross site scripting
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
CVE-2019-16178
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
CVE-2019-16178
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
CVE-2019-16178: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home page...
PT-2019-14558
Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.14 Description A stored cross-site scripting issue was discovered that allows authenticated users with the correct permissions to inject arbitrary web script or HTML via titles of admin box buttons on the home...
WordPress crafty-social-buttons plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. crafty-social-buttons is a plugin for adding links to social networking sites. A cross-site scripting vulnerability exists in the...
WordPress share-on-diaspora plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. share-on-diaspora is a plugin that adds share buttons to it. A cross-site scripting vulnerability exists in the WordPress...
WordPress ad-buttons plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress ad-buttons plugin. An attacker can exploit this...
CVE-2017-18578
The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...
CVE-2017-18578
The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...
CVE-2017-18578
The CVE-2017-18578 issue affects the WordPress plugin Crafty Social Buttons, specifically versions prior to 1.5.8. The vulnerability is a Cross-Site Scripting (XSS) flaw in the plugin, enabling client-side code execution. Public sources (Red Hat, CNVD/CVE records, and WP vulnerability discussions...
CVE-2017-18578
The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...
PT-2019-8512
Name of the Vulnerable Software and Affected Versions crafty-social-buttons plugin versions prior to 1.5.8 Description The issue allows for XSS. Recommendations For versions prior to 1.5.8, update to version 1.5.8 or later to resolve the issue...
CVE-2017-18578: Improper Neutralization of Input During Web Page Generation
The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS...