Exploit for CVE-2022-30190

Follina Proof of Concept CVE-2022-30190 Quick and easy "pro...

Zoom Patches ‘Zero-Click’ RCE Bug

Zoom patched a medium-severity flaw, advising Windows, macOS, iOS and Android users to update their client software to version 5.10.0. The Google Project Zero security researcher Ivan Fratric noted in a report that an attacker can exploit a victim’s machine over a zoom chat. The bug, tracked as...

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message

Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol XMPP messages and execute malicious code. Tracked from CVE-2022-2278...

cfsshtunnel (>=0.1.7, <=0.2.1), click-reviewers-tools (>=0.70.0b0, <=0.86.0) +2 more potentially affected by CVE-2019-15795 via python-apt (0.7.8)

python-apt PYPI version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on python-apt and may be impacted: - cfsshtunnel =0.1.7, =0.70.0b0, =0.86.0 - craft-parts 1.19.8 - plex-updater 0.1.0 Source cves: CVE-2019-15795 Source advisory:...

CVE-2022-29427

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

CVE-2022-29427

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

CVE-2022-29427

CVE-2022-29427 affects the WordPress plugin Disable Right Click For WP (

PT-2022-19600

Name of the Vulnerable Software and Affected Versions Disable Right Click For WP plugin versions 1.1.6 and earlier Description A Cross-Site Request Forgery CSRF issue affects the Disable Right Click For WP plugin. This allows an attacker to perform unintended actions on a user's behalf. No...

WordPress plugin Disable Right Click For WP跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Disable Right Click For WP plugin 1.1.6 and earlier versions are vulnerable to cross-site...

CVE-2022-29427: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

GHSA-M5PM-RGVF-VG22 Apache OpenMeetings vulnerable to Cross-Site Request Forgery

Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery CSRF attacks, XSS attacks, click-jacking, and MIME based attacks. The issue is fixed in version 3.3.0...

TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GHSA-9HW3-4GVP-8MV5 TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (May 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run updates SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2022-23137

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered...

CVE-2022-29427

Cross-Site Request Forgery CSRF vulnerability in Aftab Muni's Disable Right Click For WP plugin = 1.1.6 at WordPress...

WordPress Disable Right Click For WP plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Rasi Afeef Patchstack Alliance in WordPress Disable Right Click For WP plugin versions = 1.1.6. Solution No patched version is available. No reply from the vendor...

Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches

Cybersecurity researchers have detailed as many as five severe security flaws in the implementation of TLS protocol in several models of Aruba and Avaya network switches that could be abused to gain remote access to enterprise networks and steal valuable information. The findings follow the March...

CVE-2022-0191

The Ad Invalid Click Protector AICP WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans...

CVE-2022-0191

The CVE-2022-0191 entry concerns the Ad Invalid Click Protector (AICP) WordPress plugin prior to version 1.2.7. The root cause is a missing CSRF check when deleting banned users, allowing a logged-in administrator to remove arbitrary bans via CSRF. Documents confirm this affects the AICP plugin a...