Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi

The plugin does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection curl 'http://example.com/?restroute=/olistener/new' --data '"id":" SELECT SLEEP3"' -H 'content-type: application/json'...

Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update

The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as the userscanregister and defaultrole,...

CVE-2021-22897 affecting package curl for versions less than 7.76.0-5

CVE-2021-22897 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22947 affecting package curl for versions less than 7.82.0-1

CVE-2021-22947 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22898 affecting package curl for versions less than 7.76.0-5

CVE-2021-22898 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22945 affecting package curl for versions less than 7.82.0-1

CVE-2021-22945 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22925 affecting package curl for versions less than 7.76.0-5

CVE-2021-22925 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22922 affecting package curl for versions less than 7.76.0-5

CVE-2021-22922 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22924 affecting package curl for versions less than 7.76.0-5

CVE-2021-22924 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22923 affecting package curl for versions less than 7.76.0-5

CVE-2021-22923 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

CVE-2021-22946 affecting package curl for versions less than 7.82.0-1

CVE-2021-22946 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22926 affecting package curl for versions less than 7.82.0-1

CVE-2021-22926 affecting package curl for versions less than 7.82.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22901 affecting package curl for versions less than 7.76.0-5

CVE-2021-22901 affecting package curl for versions less than 7.76.0-5. A patched version of the package is available...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:0103-1 Rating: important References: Cross-References: CVE-2022-0789 CVE-2022-0790 CVE-2022-0791 CVE-2022-0792 CVE-2022-0793 CVE-2022-0794 CVE-2022-0795 CVE-2022-0796 CVE-2022-0797 CVE-2022-0798 CVE-2022-0799...

Critical Photon OS Security Update - PHSA-2022-0377

Updates of 'curl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-3.0-0377

Updates of 'curl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0168

Updates of 'linux-aws', 'linux', 'lua', 'curl', 'linux-secure', 'bindutils', 'vim', 'linux-rt', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0168

Updates of 'linux-esx', 'curl', 'bindutils', 'linux-aws', 'lua', 'vim', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Exploit for Code Injection in Vmware Spring_Framework

Spring Framework RCE exploitation Quick pentest notes...

CVE-2022-22963 - PoC Spring Java Framework 0-day Remote Code Execution Vulnerability

To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...