WordPress HM Logo Showcase – Slider & Grid plugin < 1.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HM Logo Showcase – Slider & Grid plugin versions 1.9. Solution Update the WordPress HM Logo Showcase – Slider & Grid plugin to the latest available version at least 1.9...

hm-notes.ru Improper Access Control vulnerability OBB-2261297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-24602

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page...

Code injection

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page...

CVE-2021-24602 HM Multiple Roles < 1.3 - Arbitrary Role Change

The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page...

CVE-2021-24602

The CVE-2021-24602 entry refers to the HM Multiple Roles WordPress plugin (versions prior to 1.3) with a lack of access control that allows a low-privilege user to elevate themselves to Administrator via the profile page. This is a privilege-escalation vulnerability, with impact described as unau...

PT-2021-16117 · WordPress · Hm Multiple Roles

Name of the Vulnerable Software and Affected Versions: HM Multiple Roles WordPress plugin versions prior to 1.3 Description: The issue concerns a lack of access control in the HM Multiple Roles WordPress plugin, allowing low-privilege users to elevate their privileges to admin via their profile...

WordPress HM Multiple Roles plugin <= 1.2 - Arbitrary Role Change vulnerability

Arbitrary Role Change vulnerability discovered by clemorphy in WordPress HM Multiple Roles plugin versions = 1.2. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.3...

Unspecified Vulnerability in ASUS HM Com Service

ASUS HM Com Service is a motherboard-related utility program from ASUS. An unspecified vulnerability exists in ASUS HM Com Service, which can be exploited by an attacker to execute arbitrary code with system privileges...

ASUS HM Com Service 1.00.31 Unquoted Service Path

Exploit Title: ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path Date: 2019-11-16 Exploit Author : Olimpia Saucedo Vendor Homepage: www.asus.com Version: 1.00.31 Tested on: Windows 10 Pro x64 but it should works on all windows version The application suffers from an unquoted servic...

CVE-2019-18939

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request...

CVE-2019-18939

eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request...

CVE-2019-18939

The CVE-2019-18939 issue affects eQ-3 Homematic CCU2 (version 2.47.20) and CCU3 (version 3.47.18) when the HM-Print AddOn up to 1.2a is installed. According to Red Hat and CVE records, unauthenticated attackers with access to the device web interface can trigger Remote Code Execution via the exec...

CVE-2019-15569

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...

Sql injection

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...

CVE-2019-15569

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...

CVE-2019-15569

Summary (CVE-2019-15569): HM Courts & Tribunals CCD data-store-api prior to 2019-06-10 is vulnerable to SQL injection, as reported in multiple sources. The issue affects the data-store API’s query handling, specifically related to SearchQueryFactoryOperation.java and SortDirection.java, allowing ...

hm-vorsorge.de XSS vulnerability

Open Bug Bounty ID: OBB-581929 Description| Value ---|--- Affected Website:| hm-vorsorge.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID13959: Email Messages Distributing Malicious Software on March 11, 2015

Medium Alert ID: 37836 First Published: 2015 March 11 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13959 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID10975: Email Messages Distributing Malicious Software on August 6, 2014

Medium Alert ID: 35187 First Published: 2014 August 6 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10975 may contain the following files: Name | Si...