720 matches found
WordPress Plugin HT Mega Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software HT Mega Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51529 Patch priority Low CVSS severity Low 4.3 Developer HTMega PSID af6331300a3e Credits Brandon Roldan Required privilege...
WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)
Software HT Mega Type Plugin Vulnerable versions = 2.3.8 Fixed in 2.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50901 Patch priority Medium CVSS severity Medium 7.1 Developer HTMega PSID 46290c97b255 Credits Le Ngoc Anh Required privilege Unauthenticated...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
Code injection
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48193
Summary of CVE-2022-48193 : The issue affects Softing smartLink SW-HT prior to version 1.30, where weak ciphers are enabled during SSL/TLS communication due to the underlying configuration. The impact concerns confidentiality (C: High) with no integrity or availability impact stated in the source...
CVE-2022-48192
CVE-2022-48192 is a Cross-site Scripting vulnerability affecting Softing smartLink SW-HT before 1.30. The issue allows an attacker to execute dynamic scripts (JavaScript/VBScript) in the application context. The vulnerability is tied to SW-HT versions prior to 1.30; remediation is to upgrade to 1...
CVE-2022-48193 Weak ciphers vulnerability in Softing smartLink SW-HT
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48192 Cross-site scripting vulnerability in Softing smartLink SW-HT
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...
ht-pt.com Cross Site Scripting vulnerability OBB-3756992
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ht-hydrotechnology.com Cross Site Scripting vulnerability OBB-3756990
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30146
Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...
CVE-2023-30146
CVE-2023-30146 affects the Assmann Digitus Plug&View IP Camera HT-IP211HDP (firmware 2.000.022). The vulnerability allows unauthenticated remote retrieval of the device settings and administrator credentials via a backup/restore mechanism. Related evidence in public sources describes a plaintext-...
WordPress HT Mega Plugin <= 2.2.0 is vulnerable to Privilege Escalation
Software HT Mega Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37999 Patch priority High CVSS severity High 9.8 Developer HTMega PSID bbe5238c947f Credits Rafie Muhammad Patchstac...
ht.augustcompressor.com Cross Site Scripting vulnerability OBB-3506162
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-23791
Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Menu plugin = 1.2.1 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Menu plugin = 1.2.1 versions...
CVE-2023-23791 WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Menu plugin = 1.2.1 versions...