WordPress Export All URLs plugin跨站脚本漏洞

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of the WordPress Export All URLs plugin prior to 4.2, which stems from the plugin's failu...

WordPress Export All URLs plugin <= 4.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Export All URLs plugin versions = 4.1. Solution Update the WordPress Export All URLs plugin to the latest available version at least 4.2...

Johnson Controls Metasys system 代码问题漏洞

The Johnson Controls Metasys system is a building automation system from Johnson Controls. A code issue exists in Johnson Controls Metasys ADS/ADX/OAS 10-series servers prior to version 10.1.5 and 11-series servers prior to version 11.0.2 in regards to MUI PDF. An authenticated attacker can injec...

Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip (Authenticated)

Exploit Title: Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip Authenticated Date: 02-17-2022 Exploit Author: Ceylan Bozoğullarından Blog Post: https://bozogullarindan.com/en/2022/01/wordpress-iq-block-country-1.2.13-admin-arbitray-file-deletion-via-zip-slip/...

WordPress Export All URLs plugin <= 4.2 - Private/Draft Post/Page Title Disclosure via Cross-Site Request Forgery (CSRF) vulnerability

Private/Draft Post/Page Title Disclosure via Cross-Site Request Forgery CSRF vulnerability discovered by Asif Nawaz Minhas in WordPress Export All URLs plugin versions = 4.2. Solution Update the WordPress Export All URLs plugin to the latest available version at least 4.3...

WordPress iQ Block Country 1.2.13 Arbitrary File Deletion

Exploit Title: Wordpress Plugin iQ Block Country 1.2.13 - Arbitrary File Deletion via Zip Slip Authenticated Date: 02-17-2022 Exploit Author: Ceylan Bozoğullarından Blog Post: https://bozogullarindan.com/en/2022/01/wordpress-iq-block-country-1.2.13-admin-arbitray-file-deletion-via-zip-slip/...

indiaexportnews.com Cross Site Scripting vulnerability OBB-2435888

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DEBIAN-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

UBUNTU-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

Moodle 3.8.x < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 Multiple Vulnerabilities (MSA-21-0012, MSA-21-0018)

Moodle is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Team Circle Image Slider With Lightbox...

WordPress plugin Contact Form Submissions 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of the WordPress Contact Form Submissions plugin prior to 1.7.3, which stems from...

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress MOLIE plugin has a cross-site scripting vulnerability that stems from not escaping the courseid parameter before...

Ming Out-of-Bounds Read Vulnerability (CNVD-2022-20530)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

Ming buffer overflow vulnerability (CNVD-2022-20528)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming 0.4.8, which can be exploited by an attacker to cause a direct segmentation error and lead to a denial of service...

Ming buffer overflow vulnerability (CNVD-2022-20529)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

Ming Out-of-Bounds Read Vulnerability

Ming is a Flash SWF output library written in C language. Ming has a security vulnerability that can be exploited by attackers to obtain sensitive information...

Moodle Exposure of Sensitive Information to an Unauthorized Actor

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...