Lucene search
+L

342 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.5 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS5.8AI score0.0009EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/05 4:15 p.m.9 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS5.8AI score0.0009EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/05 4:15 p.m.17 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS0.0009EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/05 4:15 p.m.24 views

Design/Logic Flaw

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

1.7CVSS4.2AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/05 3:20 p.m.35 views

CVE-2022-33726

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity...

3.3CVSS4.3AI score0.0009EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/05 3:20 p.m.89 views

CVE-2022-33726

CVE-2022-33726 involves Samsung Galaxy Friends prior to the SMR Aug-2022 Release 1, where an unprotected dynamic receiver enables an attacker to launch an activity. The vulnerability arises from an unprotected component that can be invoked by local attackers, leading to unintended activity initia...

3.3CVSS4.1AI score0.0009EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/05 12:00 a.m.10 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Galaxy Friends versions prior to SMR Aug-2022 Release 1, which arises from an unprotecte...

3.3CVSS4.9AI score0.0009EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2022/06/11 7:48 p.m.15 views

friends-of-st-annes.org Cross Site Scripting vulnerability OBB-2646748

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Hacker One
Hacker One
added 2022/03/03 1:22 a.m.23 views

TikTok: View thumbnail of any private video (friends or followers only) of Private/Public account

Vulnerability description not provided...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2022/02/24 8:07 p.m.388 views

Zenly Social-Media App Bugs Allow Account Takeover

Zenly, a social app from Snap that allows users to see the locations of friends and family on a live map, contains a pair of vulnerabilities that could endanger those being tracked. According to the Checkmarx Security Research Team, the bugs are a user-data exposure vulnerability and an...

9.2AI score
SaveExploits0References2
OSV
OSV
added 2021/11/03 5:15 p.m.24 views

CVE-2020-23126

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

6.1CVSS6AI score
SaveExploits0References1
Prion
Prion
added 2021/11/03 5:15 p.m.28 views

Cross site scripting

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

4.3CVSS6AI score0.00562EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/03 4:06 p.m.31 views

CVE-2020-23126

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends...

6AI score0.00562EPSS
SaveExploits0References1
Wordfence Blog
Wordfence Blog
added 2021/10/12 1:00 p.m.18 views

Wordfence Helps Enable Education in Uganda

I want to share something very exciting and truly wonderful with you all today. Wordfence just completed a project where we partnered with Far Away Friends, a Denver-based non-profit working in partnership with local leaders in Uganda, to bring light and electricity to a school campus in a remote...

6.6AI score
SaveExploits0
NVD
NVD
added 2021/09/09 7:15 p.m.23 views

CVE-2021-38322

The Twitter Friends Widget WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.1...

6.1CVSS0.00895EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/09 7:15 p.m.10 views

CVE-2021-38322

The Twitter Friends Widget WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.1...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2021/09/09 6:09 p.m.5 views

CVE-2021-38322 Twitter Friends Widget <= 3.1 Reflected Cross-Site Scripting

The Twitter Friends Widget WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.1...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/09/09 6:09 p.m.31 views

CVE-2021-38322 Twitter Friends Widget <= 3.1 Reflected Cross-Site Scripting

The Twitter Friends Widget WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.1...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References2
CVE
CVE
added 2021/09/09 6:09 p.m.54 views

CVE-2021-38322

The CVE concerns the Twitter Friends Widget WordPress plugin (versions up to 3.1) and is a Reflected Cross-Site Scripting (XSS) vulnerability triggered via the pmc_TF_user and pmc_TF_password parameters in ~/twitter-friends-widget.php. Affected component: WordPress plugin code handling these inpu...

6.1CVSS6AI score0.00895EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/09/09 12:00 a.m.7 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability in the WordPress plugin Twitter Friends Widget, which originate...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References4
Rows per page
Query Builder