WordPress Plugin CPT Shortcode Generator Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-45644 WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin = 1.0 versions...

CVE-2023-45644

CVE-2023-45644: Authenticated (admin+) Stored Cross-Site Scripting in the CPT Shortcode Generator plugin prior to or at version 1.0. Root cause details are not explicitly stated in the provided documents, but the vulnerability is described as a stored XSS affecting admin-level contexts. Public ex...

PT-2023-29621 · WordPress · Cpt Shortcode Generator

Name of the Vulnerable Software and Affected Versions: CPT Shortcode Generator plugin versions prior to 1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions prior to 1.1...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2023-27791

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG...

CVE-2022-24402

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks...

CVE-2022-24401

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of...

CVE-2022-24402

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks...

Design/Logic Flaw

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks...

CVE-2022-24402

CVE-2022-24402 affects TETRA TEA1: the keystream generator’s key register initialization compresses an 80-bit key to 32 bits, creating insufficient entropy and enabling feasible brute-force search. Documented in multiple sources; no patch details provided in the connected documents. Remediation s...

CVE-2022-24402 Intentionally weakened effective strength in TETRA TEA1

The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks...

IXP Data EasyInstall Security Feature Issue Vulnerability

IXP Data EasyInstall is a remote management and deployment suite from IXP Data. A security vulnerability exists in IXP Data EasyInstall version 6.6.148840. A remote attacker exploited the vulnerability to escalate privileges via PRNG...

PT-2023-21346 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXP Data Easy Install version 6.6.148840 Description: An issue in IXP Data Easy Install allows a remote attacker to escalate privileges via an insecure Pseudo-Random Number Generator PRNG. Recommendations: For IXP Data Easy Install version...

Motorola MTM5000 Security Feature Issue Vulnerability

The Motorola MTM5000 is a mobile radio from Motorola, USA. The Motorola MTM5000 suffers from a security vulnerability that stems from the use of PRNG to generate TETRA authentication polls and the use of the tick count register as its only source of entropy, which can be exploited by an attacker ...

PT-2023-12895 · Motorola · Motorola Mtm5000

Name of the Vulnerable Software and Affected Versions: Motorola MTM5000 series firmwares affected versions not specified Description: The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG that relies on a tick count register as its sole entropy source. This...

New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager

A medium-severity flaw has been discovered in Synology's DiskStation Manager DSM that could be exploited to decipher an administrator's password and remotely hijack the account. "Under some rare conditions, an attacker could leak enough information to restore the seed of the pseudorandom number...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...

CVE-2023-41630

eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...