CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

PT-2021-12051

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross-site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML by entering a crafted payload into the Exclude these IP addresses from the "Site Down"...

PT-2021-7330 · Bluez +5 · Bluez +5

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to the incorrect saving of the Discoverable status of Bluetooth adapters when a device is powered down, which is then restored when the device is powered on again. If a...

Smooth Scroll Page Up/Down Buttons <= 1.4 - Authenticated Stored XSS via psb_positioning

The plugin does not properly sanitise and validate its psbpositioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog -- Payloads: $ m0ze"...

Unbreakable Enterprise kernel security update

5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...

CVE-2021-24331

CVE-2021-24331 affects the WordPress plugin “Smooth Scroll Page Up/Down Buttons” (versions before 1.4). The root cause is improper sanitization/validation of settings (e.g., psb_distance, psb_buttonsize, psb_speed), with validation limited to the client side, enabling authenticated users (e.g., a...

CVE-2021-24331: Improper Neutralization of Input During Web Page Generation

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psbdistance, psbbuttonsize, psbspeed, only validating them client side. This could allow high privilege users such as admin to set XSS payloads in them...

PT-2021-15868

Name of the Vulnerable Software and Affected Versions Smooth Scroll Page Up/Down Buttons WordPress plugin versions prior to 1.4 Description The issue concerns the improper sanitization and validation of settings, such as psb distance, psb buttonsize, and psb speed, which were only validated...

PT-2021-24655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.117 Description The issue concerns an unconditional call to the security locked down function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versions...

PT-2021-28649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.4.116 Description The issue concerns an unconditional call to the security locked down function. The actual impact and attack plausibility have not yet been proven. It is fixed in Linux Kernel version...

PT-2021-28629

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.34 Description The issue concerns an unconditional call to the security locked down function. It was introduced in version v5.4 and fixed in version v5.10.35. The actual impact and attack plausibility...

PT-2021-24635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.34 Description The issue concerns an unconditional call to the security locked down function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versio...

PT-2021-24597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.11.18 Description The issue concerns an unconditional call to the security locked down function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versio...

PT-2021-28553

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.12.1 Description The issue concerns an unconditional call to the security locked down function. It was introduced in version v5.4 and fixed in version v5.12.2. The actual impact and attack plausibility hav...

PT-2021-28591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.11.18 Description The issue concerns an unconditional call to the security locked down function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versio...

PT-2021-28622

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.34 Description The issue concerns an unconditional call to the security locked down function. It was introduced in version v5.4 and fixed in version v5.10.35. The actual impact and attack plausibility...

PT-2021-24628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.34 Description The issue concerns an unconditional call to the security locked down function. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel versio...

PT-2021-24559

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.12.1 Description: The issue concerns an unconditional call to security locked down in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

Cross site request forgery (csrf)

ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. The vulnerability has been fixed in email protected...

Major ransomware attack cripples largest gas pipeline in the US

By Habiba Rashid A massive ransomware attack on one of the largest gas pipelines in the US, Colonial Pipeline, led it to be shut down on Friday. This is a post from HackRead.com Read the original post: Major ransomware attack cripples largest gas pipeline in the US...