CVE-2023-45597

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “fileconfiguration” functionality of the web application concerning the function “exportfile” allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue...

Design/Logic Flaw

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “fileconfiguration” functionality of the web application concerning the function “exportfile” allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue...

CVE-2024-1095

The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the settingsexport function in all versions up to, and including, 1.3.5.4. This makes it possible for unauthenticated attackers to...

CVE-2024-1095

The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the settingsexport function in all versions up to, and including, 1.3.5.4. This makes it possible for unauthenticated attackers to...

CVE-2024-1095 Build & Control Block Patterns – Boost up Gutenberg Editor <= 1.3.5.4 - Missing Authorization

The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the settingsexport function in all versions up to, and including, 1.3.5.4. This makes it possible for unauthenticated attackers to...

PT-2024-13261 · Unknown · Ailux Imx6 Bundle

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-1236 issue in the file configuration functionality of the web application, concerning the export file function, allows a remote authenticated attacker to inject arbitrary...

PT-2024-20917 · Rt-Thread · Rt-Thread

Name of the Vulnerable Software and Affected Versions: RT-Thread versions through 5.0.2 Description: An out-of-bounds access occurs in utilities/var export/var export.c. Recommendations: For RT-Thread versions through 5.0.2, update to a version that fixes the out-of-bounds access issue in...

PT-2024-16659 · WordPress · Build & Control Block Patterns – Boost Up Gutenberg Editor

Name of the Vulnerable Software and Affected Versions: The Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress versions up to, and including, 1.3.5.4 Description: The issue is related to unauthorized access of data due to a missing capability check on the settings expo...

WordPress Plugin Build & Control Block Patterns Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-41829

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Input validation

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Input validation

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

XAMPP 5.6.40 SQL Injection

Exploit Title: XAMPP - Error Based SQL Injection Date: 02/2024 Exploit Author: Andrey Stoykov Version: 5.6.40 Tested on: Ubuntu 22.04 Blog: http://msecureltd.blogspot.com Steps to Reproduce: 1. Login to phpmyadmin 2. Visit Export New Template test Create 3. Navigate to "Existing Templates" 4...

PT-2024-12993 · Motorola · Motorola Carrier Services

Name of the Vulnerable Software and Affected Versions: Motorola Carrier Services affected versions not specified Description: An improper export issue in the Motorola Carrier Services application could allow a malicious, local application to read files without authorization. Recommendations: At t...

Motorola Carrier Security Breach

Motorola Carrier is a suite of solutions and services from Motorola, Inc. designed to help operators build and manage their mobile communications networks. A security vulnerability exists in Motorola Carrier that stems from the presence of an incorrect export vulnerability that could allow a...

PT-2024-12991 · Motorola · Motorola Ota Update Application

Name of the Vulnerable Software and Affected Versions: Motorola OTA update application affected versions not specified Description: An improper export issue in the Motorola OTA update application could allow a malicious, local application to inject an HTML-based message on the screen UI...

CVE-2023-41827: Improper Export of Android Application Components

An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI...

Motorola OTA Security Breach

Motorola OTA is a software update service via wireless signal from Motorola USA. A security vulnerability exists in Motorola OTA that stems from the presence of an incorrect export vulnerability that could allow a malicious native application to inject HTML-based messages on the screen UI...

Design/Logic Flaw

As a default user on a multi-user instance of AnythingLLM, you could execute a call to the /export-data endpoint of the system and then unzip and read that export that would enable you do exfiltrate data of the system at that save state. This would require the attacked to be granted explicit acce...

CVE-2024-0765 Default user role exporting save state of instance

As a default user on a multi-user instance of AnythingLLM, you could execute a call to the /export-data endpoint of the system and then unzip and read that export that would enable you do exfiltrate data of the system at that save state. This would require the attacked to be granted explicit acce...