6610 matches found
CVE-2023-27107
Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...
PT-2023-20957 · Unknown · Myq Solution Print Server +1
Name of the Vulnerable Software and Affected Versions: MyQ Solution Print Server versions prior to 8.2 Patch 32 MyQ Solution Central Server versions prior to 8.2 Patch 22 Description: The issue is related to incorrect access control in the runReport function, allowing users without appropriate...
CVE-2023-27107
Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 allows users who do not have appropriate access rights to generate internal reports using a direct URL...
CVE-2023-27107
The CVE-2023-27107 issue affects MyQ Solution Print Server (prior to 8.2 Patch 32) and MyQ Solution Central Server (prior to 8.2 Patch 22). The root cause is incorrect access control in the runReport function, which permits users without proper rights to generate internal reports via a direct URL...
MyQ Solution Print Server and MyQ Solution Central Server security vulnerabilities
MyQ Solution Print Server and MyQ Solution Central Server are both products of MyQ Solution, Inc.MyQ Solution Print Server is an easy-to-use print management software. It can control printers, reduce printing costs, and be environmentally friendly by reducing unnecessary waste.MyQ Solution Centra...
central-asia.lt Cross Site Scripting vulnerability OBB-3275051
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0418
The Video Central for WordPress plugin through 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
Cross site scripting
The Video Central for WordPress plugin through 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0418
CVE-2023-0418 affects the Video Central for WordPress plugin up to version 1.3.0. The vulnerability is a Stored XSS due to insufficient validation and escaping of certain shortcode attributes when output in pages/posts that embed the shortcode. Impact is limited to users with contributor role and...
Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering
The Russian-speaking threat actor behind a backdoor known as Tomiris is primarily focused on gathering intelligence in Central Asia, fresh findings from Kaspersky reveal. "Tomiris's endgame consistently appears to be the regular theft of internal documents," security researchers Pierre Delcher an...
Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering
The Russian-speaking threat actor behind a backdoor known as Tomiris is primarily focused on gathering intelligence in Central Asia, fresh findings from Kaspersky reveal. "Tomiris's endgame consistently appears to be the regular theft of internal documents," security researchers Pierre Delcher an...
Ivanti Avalanche FileStoreConfig File Upload
Ivanti Avalanche prior to v6.4.0.186 permits MS-DOS style short names in the configuration path for the Central FileStore. Because of this, an administrator can change the default path to the web root of the applications, upload a JSP file, and achieve RCE as NT AUTHORITY\SYSTEM. Module Options m...
CVE-2023-0418: Undefined Security Weakness
The Video Central for WordPress plugin through 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
PT-2023-16256 · WordPress · The Video Central For Wordpress
Name of the Vulnerable Software and Affected Versions: The Video Central for WordPress plugin through 1.3.0 Description: The issue concerns a lack of validation and escaping of certain shortcode attributes in the plugin, which could allow users with the contributor role and above to perform Store...
WordPress plugin Video Central has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Security Bulletin: Vulnerabilities in Apache Shiro (CVE-2022-40664) and Apache Commons FileUpload (CVE-2023-24998) affect IBM WebSphere Service Registry and Repository.
Summary A bypass security restrictions vulnerability in Apache Shiro CVE-2022-40664 and a denial of service vulnerability in Apache Commons File Upload CVE-2023-24998 affect IBM WebSphere Service Registry and Repository. Vulnerability Details CVEID:CVE-2022-40664 DESCRIPTION: Apache Shiro could...
CVE-2023-24504
Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...
CVE-2023-24501
Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit...