1766 matches found
GHSA-FM68-J7WW-H9XF XWiki Platform vulnerable to Code Injection in icon themes
Impact By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote code execution. There are different attack vectors, the simplest is the Velocity code in the icon...
XWiki Platform vulnerable to Code Injection in icon themes
Impact By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote code execution. There are different attack vectors, the simplest is the Velocity code in the icon...
The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.
The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...
The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.
The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...
The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.
The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...
CVE-2023-36470
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote...
CVE-2023-36470 Code injection in icon themes of XWiki Platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote...
CVE-2023-36470
CVE-2023-36470 affects XWiki Platform. When a document is created or edited using an icon set, an attacker can inject XWiki syntax and Velocity code that runs with programming rights, enabling remote code execution. Attack vectors include the icon set HTML/XWiki syntax definitions and the icon pi...
CVE-2023-36470 Code injection in icon themes of XWiki Platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote...
XWiki Platform 注入漏洞
XWiki Platform is a suite of Wiki platforms from the XWiki Foundation in France for creating web collaboration applications. An injection vulnerability exists in XWiki Platform versions prior to 14.10.6, 15.2-rc-1 and prior to 15.2-rc-1, which can be exploited to inject XWiki syntax and Velocity...
PT-2023-4817 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.6 XWiki Platform versions prior to 15.1 Description: The issue allows an attacker to inject XWiki syntax and Velocity code, which is executed with programming rights, thus enabling remote code execution...
Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Insert any of the following shortcodes in a...
CVE-2023-34158
Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...
CVE-2023-34158
Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...
CVE-2023-34167
CVE-2023-34167 affects Huawei Desktop on HarmonyOS. The issue is a whitelist emulation vulnerability in Huawei Desktop that enables spoofing of trustlists, allowing malicious third-party apps to hide desktop icons and thereby hinder uninstallation. Effects described across sources include icons b...
CVE-2023-34158
CVE-2023-34158 concerns Huawei software (desktop/HarmonyOS). Connected sources indicate a vulnerability in how trustlists can be spoofed to hide desktop icons, with Red Hat/NVD reiterating a trustlist spoofing issue. A separate ENISA/CNNVD entry describes a HarmonyOS-related flaw where a maliciou...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a whitelist emulation vulnerability in Huawei Desktop, which can be exploited by...
WordPress plugin VK Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Call Now Icon Animate Type Plugin Vulnerable versions = 0.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34187 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cca3b242a6de Credits Rio Darmawan Requir...
