CVE-2025-23632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-23632

CVE-2025-23632 affects the WordPress CG Button plugin (Rhizome Networks) up to version 1.0.5.6. It is a Reflected XSS caused by improper input neutralization during web page generation. Exploitation is possible remotely (network access) and requires user interaction. Current connected sources ind...

WordPress plugin CG Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress CG Button plugin <= 1.0.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin CG Button versions = 1.0.5.6...

Malicious code in cg-be-package (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1031 Malicious code in cg-be-package (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in byted-cg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90e251b9f3c49de738ecec6d31759290c20383f748735d901d797110fd1b6fb2 The OpenSSF Package Analysis project identified 'byted-cg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

SUSE CVE-2021-47379

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-free report when doing fuzz test: 693354.104835 ================================================================== 693354.105094 BUG:...

PT-2024-40491 · Cg · Cg

Name of the Vulnerable Software and Affected Versions: cg affected versions not specified Description: A vulnerability has been discovered in the handling of the referrer header in the application, which could allow an attacker to conduct open redirects. The issue arises from improper validation ...

China Mobile Intelligent Home Gateway Command Injection Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4, which originates from a vulnerability that allows remote attackers to execute...

Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-3261)

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...

kubernetes security update

kubernetes 1.24.8-2 - libct/cg: add misc controller to v1 drivers upstream runc patch 1.24.8-1 - Added Oracle specific build files for Kubernetes olcne 1.5.13-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support upgrade from OL7 to OL8 using leapp...

CVE-2022-4158

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...

CVE-2022-4162

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgrow POST parameter before concatenating it to an SQL query in 3row-order.php. This may allow malicious users with at least author privilege to leak sensitive information...

WordPress Plugin Contest Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-41279

A vulnerability has been identified in JT2Go All versions V14.1.0.6, Teamcenter Visualization V13.2 All versions V13.2.0.12, Teamcenter Visualization V13.3 All versions V13.3.0.8, Teamcenter Visualization V14.0 All versions V14.0.0.4, Teamcenter Visualization V14.1 All versions V14.1.0.6. The...

Realtek RTL8111FP-CG License Issue Vulnerability

The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...

CVE-2022-32967

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...

CVE-2022-32966

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-32967

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...