5251 matches found
WordPress plugin Image Social Feed Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2023-19573 · Unknown · Web-Settler Image Social Feed
Name of the Vulnerable Software and Affected Versions: Web-Settler Image Social Feed plugin versions 1.7.6 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions 1.7.6 and...
PT-2023-19891 · Unknown · Oauth Twitter Feed For Developers
Name of the Vulnerable Software and Affected Versions: oAuth Twitter Feed for Developers plugin versions = 2.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the oAuth Twitter...
UBUNTU-CVE-2023-4522
An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...
PT-2023-29461 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 16.2.0 Description: An issue has been discovered in GitLab where committing directories containing an LF character results in 500 errors when viewing the commit. Recommendations: For versions prior to 16.2.0, update t...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab, which stems from the fact that...
CVE-2023-32577
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin = 4.0.0 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin = 4.0.0 versions...
CVE-2023-32577
CVE-2023-32577 – DevBuddy Twitter Feed (WordPress)
CVE-2023-32577 WordPress DevBuddy Twitter Feed Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin = 4.0.0 versions...
WordPress plugin DevBuddy Twitter Feed 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-36846
creationtimestamp| type| source ---|---|--- 2023-08-18 00:38:01+00:00| seen| https://t.me/cibsecurity/68807 2023-08-20 06:53:11+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus14/2023 2023-08-27 15:11:36+00:00| published-proof-of-concept|...
CVE-2023-36847
creationtimestamp| type| source ---|---|--- 2023-08-18 00:37:46+00:00| seen| https://t.me/cibsecurity/68795 2023-08-20 06:53:11+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus14/2023 2023-08-27 15:11:36+00:00| published-proof-of-concept|...
CVE-2020-36034
creationtimestamp| type| source ---|---|--- 2023-08-11 18:16:55+00:00| seen| https://t.me/cibsecurity/68352...
CVE-2023-36313
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...
CVE-2023-36313
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...
CVE-2023-36313
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...
[SECURITY] Fedora 37 Update: seamonkey-2.53.17-1.fc37
SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...
nodejs: HTTP Request Smuggling via Empty headers separated by CR
A vulnerability has been identified in the Node.js, where llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...