3194 matches found
PT-2023-5212 · Schweitzer Engineering Laboratories · Sel Grid Configurator
Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: A Cross-Site Request Forgery CSRF issue affects the SEL Grid Configurator, allowing an attacker to embed instructions that could be...
MAL-2023-351 Malicious code in fc-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7ff6c5579b1a0d46ad0e9f00fa9dc937a36959d52898b7bdc9fedf4a645643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fc-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7ff6c5579b1a0d46ad0e9f00fa9dc937a36959d52898b7bdc9fedf4a645643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids
A new strain of malicious software that's engineered to penetrate and disrupt critical systems in industrial environments has been unearthed. Google-owned threat intelligence firm Mandiant dubbed the malware COSMICENERGY , adding it was uploaded to the VirusTotal public malware scanning utility i...
CVE-2023-2903
A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an unknown part of the file /SystemManage/Role/GetGridJson?keyword=&page=1&rows=20. The manipulation leads to improper access controls. It is possible to initiate the attack remotel...
CVE-2023-2902
A vulnerability was found in NFine Rapid Development Platform 20230511. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /SystemManage/Organize/GetTreeGridJson?search=false&nd=1681813520783&rows=10000&page=1&sidx=&sord=asc. The manipulation leads ...
NFine Rapid Development Platform 安全漏洞
NFine Rapid Development Platform is a C-based, blazing-fast WEB + ORM framework for individual NFine developers. A security vulnerability exists in NFine Rapid Development Platform that originates from /SystemManage/User/GetGridJson?search=false&nd=1680855479750&rows=50&page=1&sidx=F...
NFine Rapid Development Platform 访问控制错误漏洞
NFine Rapid Development Platform is an extremely fast WEB + ORM framework based on C language for NFine individual developers. NFine Rapid Development Platform suffers from an Access Control Error vulnerability that originates from the presence of an unknown function in...
PT-2023-22084 · Unknown · Nfine Rapid Development Platform
Name of the Vulnerable Software and Affected Versions: NFine Rapid Development Platform version 20230511 Description: A vulnerability has been found in the NFine Rapid Development Platform, affecting an unknown functionality of the file "/SystemManage/User/GetGridJson?...
NFine Rapid Development Platform 安全漏洞
NFine Rapid Development Platform is a C language based, very fast WEB + ORM framework for NFine individual developers. A security vulnerability exists in NFine Rapid Development Platform, which stems from systemManage/Organize/GetTreeGridJson?search=false&nd=1681813520783&rows=10000&page=1&...
CVE-2022-46853
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...
CVE-2022-46853
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...
CVE-2022-46853 WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...
CVE-2022-46853 WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...
CVE-2022-46853
CVE-2022-46853 refers to a Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin, affecting versions system-wide up to 5.0.4. The underlying issue is an insecure settings-update flow that could be abused to perform admin actions via CSRF. Remediation is to upgrade to...
WordPress plugin The Post Grid 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the save grid option, which allows an attacker to inject arbitrary JavaScript code into the browser...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the grid option, which allows an attacker to inject arbitrary JavaScript into the browser...
WordPress Featured Image Pro Post Grid Plugin <= 5.14 is vulnerable to Cross Site Scripting (XSS)
Software Featured Image Pro Post Grid Type Plugin Vulnerable versions = 5.14 Fixed in 5.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32598 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4756e7fba901 Credits OZ1NG TOOR...