4106 matches found
CVE-2021-44135
CVE-2021-44135 concerns Pagekit. Multiple connected sources document a SQL injection vulnerability in Pagekit’s comment listing, tied to the way the ConfigAction in SettingsController concatenates the order parameter (ASC/DESC) directly into SQL without sanitization. This leads to potential data ...
WordPress DW Question & Answer Pro premium plugin <= 1.3.4 - Arbitrary Comment Edition via IDOR vulnerability
Arbitrary Comment Edition via IDOR vulnerability discovered by Brandon Roldan in WordPress DW Question & Answer Pro premium plugin versions = 1.3.4. Solution No patched version is available...
DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
The plugin does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status. Vendor was notified via Envato on September 28th, 2021, but did not properly fix the issue and was notified...
DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
The plugin does not check that the comment to edit belongs to the user making the request, allowing any user to edit other comments. Vendor was notified via Envato on September 28th, 2021, but did not properly fix the issue and was notified numerous times since. As any authenticated user, post a...
DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
The plugin does not properly check for CSRF in some of its functions, allowing attackers to make logged in users perform unwanted actions, such as update a comment or a question status. Vendor was notified via Envato on September 28th, 2021, but did not properly fix the issue and was notified...
Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. As admin, put the following in the plugin's settings: test = "alert/XSS/ Tick the "Enable text hover in...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to writing beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to writing beyond buffer boundaries in memory during the execution of the EMRCOMMENTEMFPLUS command in EMF files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a...
CVE-2021-45793
Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...
Slims9 Bulian SQL注入漏洞
Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. Slims9 Bulian suffers from a SQL injection vulnerability that originates from a SQL...
The microweber application allows large characters to insert in the input field "Leave comment" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber
Proof of Concept 1. Go to http://site/admin/view:content/action:posts 2. Create a page and enable to add comment option 3. Go to that page and there will a option called "Leave a comment" 4. Copy the below payload and put it in the "Leave a comment" field post a comment 5. Go to...
YzmCMS uncontrolled recursion vulnerability
Yzmcms is an open source CMS content management system for Yzmcms individual developers. an uncontrolled recursive vulnerability exists in YzmCMS v6.3, which stems from the fact that the comment function can operate concurrently and an attacker can use this vulnerability to create an unusually...
CISA’s Zero Trust Guidance for Enterprise Mobility Available for Public Comment
CISA has released a draft version of Applying Zero Trust Principles to Enterprise Mobility for public comment. The paper guides federal agencies as they evolve and operationalize cybersecurity programs and capabilities, including cybersecurity for mobility. The public comment period will close...
CVE-2021-38578
creationtimestamp| type| source ---|---|--- 2022-03-04 00:26:34+00:00| seen| https://t.me/cibsecurity/38394 2024-07-27 08:42:43+00:00| seen| https://vulnerability.circl.lu/comment/f5ac1ede-8d1c-409b-b6bc-ce202e11fc90 2025-04-23 19:05:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13121...
ncagr.gov Cross Site Scripting vulnerability OBB-2396168
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ncagr.gov ---|--- Open Bug Bounty...
Taocms SQL Injection Vulnerability (CNVD-2022-31825)
Taocms is a micro Cms Content Management System in China. A SQL injection vulnerability exists in Taocms version 3.0.2, which originates from a lack of validation of externally entered SQL statements in the Comment Update field. An attacker can exploit this vulnerability to execute illegal SQL...
CVE-2022-0675
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...
UBUNTU-CVE-2022-0675
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...
CVE-2022-0675
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state...
