7659 matches found
[SECURITY] Fedora 34 Update: rust-sd-0.7.6-4.fc34
Intuitive find & replace CLI. Painless regular expressions sd uses regex syntax that you already know from JavaScript and Python. Forget about dealing with quirks of sed or awk - get productive immediately. String-literal mode Non-regex find & replace. No more backslashes or remembering which...
WordPress Easy Social Feed plugin <= 6.2.6 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Easy Social Feed plugin versions = 6.2.6. Solution Update the WordPress Easy Social Feed plugin to the latest available version at least 6.2.7...
easy-mock 1.6.0 - Remote Code Execution (Authenticated) Exploit
Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json import random...
Easy-Mock 1.6.0 Remote Code Execution
Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Date: 12/08/2021 Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json...
easy-mock 1.6.0 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Date: 12/08/2021 Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json...
WordPress TR Easy Google Analytics plugin <= 1.0.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress TR Easy Google Analytics plugin versions = 1.0.0. Solution This plugin has been closed as of October 23, 2018 and is not available for download. Reason: Guideline Violation...
Nature Easy Soft Network Technology ZenTao 代码问题漏洞
Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management functions. ...
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
An id GET parameter of the plugin is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection PoC GET /wp-admin/admin.php?page=easytestimonialupdate=page=easytestimonialupdate=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,user,NULL,NULL-- HTTP/1.1...
Cross site scripting
The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users such as subscriber to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not...
CVE-2021-24405 Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users such as subscriber to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not...
CVE-2021-24405
The CVE-2021-24405 entry applies to the WordPress plugin Easy Cookies Policy up to version 1.6.2. The vulnerability stems from missing CSRF protection and lack of sanitisation/validation when saving settings, enabling any authenticated user (e.g., subscriber) to alter the cookie banner configurat...
WordPress plugin Easy Cookies Policy 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Easy...
Easy WP SMTP Plugin for WordPress < 1.4.4 Sensitive Information Disclosure
Binary data wordpressplugineasywpsmtpexposure.nbin...
Arbitrary File Read Vulnerability in EG Easy Gateway of Beijing StarNet Ruijie Network Technology Co.
Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and so on. An arbitrary file read vulnerability exists in the EG Easy Gateway...
F5 BIG-IQ VE 8.0.0-2923215 Remote Root
F5 BIG-IQ VE v8.0.0-2923215 Post-auth Remote Root RCE CVE-2021-23024 ======= Details ======= It was possible to execute commands with root privileges as an authenticated privileged user via command injection in easy-setup-test-connection. There are two blind command injection bugs in Test DNS...
Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
The plugin is lacking any capability and CSRF check when saving it's settings, allowing any authenticated users such as subscriber to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not sanitised or validated before being output in al...
WordPress Easy Cookies Policy plugin <= 1.6.2 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS)
Broken Access Control vulnerability leading to Stored Cross-Site Scripting XSS discovered by 0xB9 in WordPress Easy Cookies Policy plugin versions = 1.6.2. Solution This plugin has been closed as of April 28, 2021 and is not available for download. This closure is temporary, pending a full review...
Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
The plugin is lacking any capability and CSRF check when saving it's settings, allowing any authenticated users such as subscriber to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not sanitised or validated before being output in al...
WordPress plugin cross-site scripting vulnerability (CNVD-2021-40772)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in Easy...
