Idor Lead to Delete exported data file

Description In this case attacker is able to delete requested export data file Steps to repro:- 1.Create 2 accounts 2.Login in both account and goto export section and create new export in both account 3.Delete acc1's exported file and capture this request in burp suite and change the id of this...

CVE-2022-1977

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks...

CVE-2022-1977

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks...

Server side request forgery (ssrf)

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks...

CVE-2022-1977: Server-Side Request Forgery (SSRF)

The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks...

PT-2025-8608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue arises from the combination of EXPORT SYMBOL and init annotations in the tick nohz full setup function. This combination ...

CVE-2022-1740

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

Design/Logic Flaw

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

CVE-2022-1740 2.2.2 MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA CWE-1283

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device...

PT-2022-6323 · Canonical · Ubuntu

Name of the Vulnerable Software and Affected Versions: Mahara versions 21.04 through 21.04.6 Mahara versions 21.10 through 21.10.4 Mahara versions 22.04 through 22.04.2 Mahara version 22.10.0 Description: The vulnerability exists due to the lack of protection of the web page structure in the PDF...

MAL-2022-3250 Malicious code in fusion-tables-drive-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e517db93a2666a82a94bd6147c6e795120071a2af38530dbf664fe52b42ff9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fusion-tables-drive-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e517db93a2666a82a94bd6147c6e795120071a2af38530dbf664fe52b42ff9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fusion-tables-drive-export

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in range-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in range-export

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-5588 Malicious code in range-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87e0eaef734e8f48ec3ef78b1404dcf4119124df9a8ac563e13abc11d267a03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-proposal-export-default-from (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09e67c1f58311edfee436c15f6e587d6bfc574cf3ea5c5a69afaea70790652b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in plugin-proposal-export-default-from

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in azure-arm-storageimportexport-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1290 Malicious code in azure-arm-storageimportexport-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...