3168 matches found
Siemens EN100 Ethernet Module
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: EN100 Ethernet Module Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer. 2. RISK EVALUATION Successful exploitation of this vulnerability could...
WordPress Image Gallery-Grid Gallery plugin跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Gallery-Grid Gallery plugin 1.1.1 and earlier versions have a cross-site scripting...
Ltd. Gold Grid Security Trusted Operation and Maintenance Management System has a logic flaw vulnerability
Golden Grid Security Trusted Operation and Maintenance Management System provides a professional "human-machine" interactive operation and maintenance platform and professional "human-machine" delivery solutions. Ltd. Jin Grid Security Trusted Operation and Maintenance Management System has a log...
WordPress plugin Image Gallery - Grid Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Gallery-Grid Gallery plugin 1.1.1 and earlier versions have a cross-site scripting...
WordPress Post Grid,Slider
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Post Grid,Slider...
Webkul krayin crm 跨站脚本漏洞
Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...
MAL-2022-2991 Malicious code in fe-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fe-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b8452b6601a0290b2602c159aa5fbf2eccc43690b1527ab86dab56c6a6ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @harrysforge/grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f24bf93db656f39f416cbf6cc0fd20097c380469659c0245a5263c925c0ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-315 Malicious code in @harrysforge/grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f24bf93db656f39f416cbf6cc0fd20097c380469659c0245a5263c925c0ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1266
The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
WordPress plugin Post Grid, Slider & Carousel Ultimate 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Post Grid,Slider...
Selenium Grid Cross-Site Request Forgery (CVE-2022-28108)
A cross-site request forgery vulnerability exists in Selenium Grid. Successful exploitation of this vulnerability could result in code execution on the affected system...
CVE-2022-30469
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
CVE-2022-30469
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata" in /?module=fileman§ion=get&page=grid leads to SQL injection...
Afian FileRun SQL注入漏洞
Afian FileRun is a full-featured web-based file manager. sql injection vulnerability exists in Afian Filerun version 20220202, which stems from a lack of cleanup of the POST parameter metadata in the /?module=fileman§ion=get&page=grid page. An attacker could exploit this vulnerability to cause SQ...
Image Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed Create a gallery with the "Gallery Theme" set to "Gallery Image 2", add an image and put the...
Image Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed PoC Create a gallery with the "Gallery Theme" set to "Gallery Image 2", add an image and put the...
WordPress Image Gallery – Grid Gallery plugin <= 1.1.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fayçal CHENA in WordPress Image Gallery – Grid Gallery plugin versions = 1.1.5. Solution Update the WordPress Image Gallery – Grid Gallery plugin to the latest available version at least 1.1.6...
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
The plugin does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Create a new Grid/Caroussel, in the General Settings, enable "Display Header Title" and put the...