13354 matches found
node-opcua 资源管理错误漏洞
node-opcua is a French Sterfive SAS open source implementation of an OPC UA stack written entirely in Typescript for NodeJS. A resource management error vulnerability exists in versions of node-opcua prior to 2.74.0. An attacker can exploit this vulnerability to bypass excessive memory consumptio...
Kirby 跨站请求伪造漏洞
Kirby is a file-based content management system CMS. A security vulnerability exists in Kirby version 2.5.12, which can be exploited to force the deletion of a user's page by a remote attacker who can craft a malicious CSRF page that utilizes its "delete" page feature...
PT-2022-4447 · Unknown · Node-Opcua
Name of the Vulnerable Software and Affected Versions: node-opcua versions prior to 2.74.0 Description: The issue is related to a Denial of Service DoS condition that can be triggered by bypassing limitations for excessive memory consumption. This can be achieved by sending multiple CloseSession...
Denial of Service (DoS)
Overview org.eclipse.milo:sdk-server is an open-source implementation of OPC UA Affected versions of this package are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter...
CVE-2022-24298
All versions of package freeopcua/freeopcua are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...
taoCMS 路径遍历漏洞
taoCMS is a micro CMS Content Management System in China. A security vulnerability exists in taoCMS version 3.0.2. An attacker can exploit this vulnerability to delete arbitrary files...
PT-2022-16588 · Freeopcua · Freeopcua
Name of the Vulnerable Software and Affected Versions: freeopcua/freeopcua versions all Description: The issue allows for Denial of Service DoS by bypassing limitations for excessive memory consumption. This is achieved by sending multiple CloseSession requests with the deleteSubscription paramet...
CVE-2022-2275
The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack...
CVE-2022-2276
The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog...
CVE-2022-2275
The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack...
CVE-2022-2382
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...
CVE-2022-2382
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...
Denial of Service (DoS)
Overview node-opcua is an implementation of a OPC UA stack fully written in javascript and nodejs Affected versions of this package are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the...
WordPress plugin WP Coder 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Product Slider for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2022-16307 · WordPress · Wp Coder
Name of the Vulnerable Software and Affected Versions: WP Coder WordPress plugin versions prior to 2.5.3 Description: The issue is related to the lack of a CSRF check when deleting code created by the plugin. This could allow attackers to make a logged-in admin delete arbitrary code via a CSRF...
WordPress plugin WP Edit Menu 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2022-16283 · WordPress · Product Slider For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Slider for WooCommerce WordPress plugin versions prior to 2.5.7 Description: The issue concerns flawed CSRF checks and a lack of authorization in some AJAX actions of the plugin, allowing any authenticated users to call them. This cou...
Malicious code in loade3r-utisl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54ebd6173c9af5e59af744dcd824b62353b260aaf747020954cd2b4f2455b964 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...