1705 matches found
radio-hackbox
SySS Radio Hack Box The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons...
WordPress Cherry Plugin plugin < 1.2.7 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin Cherry Plugin versions 1.2.7...
CVE-2016-20103
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
CVE-2016-20103
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
CVE-2016-20103 Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
CVE-2016-20103
The Cherry Plugin for WordPress (versions before 1.2.7 ) is vulnerable to a path traversal vulnerability. This flaw allows unauthenticated attackers to download arbitrary files by sending GET requests to /admin/import-export/download-content.php using the file parameter. Because the script passes...
EUVD-2016-10920
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
CVE-2016-20103 Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
VulnCheck KEV: CVE-2016-20103
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
PT-2026-118686
Name of the Vulnerable Software and Affected Versions Cherry Plugin for WordPress versions prior to 1.2.7 Description An issue allows unauthenticated attackers to download arbitrary files. This occurs because the script passes input directly to the readfile function without proper validation...
CVE-2016-20103: Improper Limitation of a Pathname to a Restricted Directory
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...
Cherry Framework Cherry Plugin Path Traversal Vulnerability
The Cherry Framework and Cherry Plugin versions prior to 1.2.7 have a path traversal vulnerability. This vulnerability arises from the lack of validation for the file parameter input, allowing for path traversal attacks. An attacker could send a GET request to...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD After i915vmapinww is completed, a synchronous variant of dmafenceworkcommit is called. When pinning a VMA to GGTT address space on a Cherry View family processor...
Malicious code in lima-cherry-opmz (npm)
The package lima-cherry-opmz was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lemon-mango-cherry-ldblp (npm)
The package lemon-mango-cherry-ldblp was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lemon-tango-cherry-pnsyi (npm)
The package lemon-tango-cherry-pnsyi was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in kiwi-cherry-eaob (npm)
The package kiwi-cherry-eaob was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in jalapeno-cherry-k98i (npm)
The package jalapeno-cherry-k98i was found to contain malicious code. --- Credit: OpenSSF source...