14559 matches found
Information disclosure
Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device...
PT-2022-14428
Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A problematic issue has been discovered, affecting some unknown functionality of the file "/admin/?page=system info" of the System Name Handler component. The manipulation of the...
PT-2025-8275
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue described Description A vulnerability has been identified in the Linux kernel related to the bpf arm64 component. The issue arises when the bpf prog get info by fd...
CVE-2022-29784
CVE-2022-29784 affects PublicCMS versions 4.0.202204.a and earlier. The vulnerability is an information leak via the component /views/directive/sys/SysConfigDataDirective.java, caused by improper handling within that directive. CVSS data in the initial record shows a MEDIUM severity with confiden...
CVE-2021-42886
TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file...
CVE-2022-1980
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...
CVE-2022-27781
libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation...
Unable to updateReward if there are too many rewardTokens
Lines of code Vulnerability details Impact If there are too many rewardTokens, updateReward might run exceed block gas limit and freeze fund since stake and withdraw have the updateReward modifier. Proof of Concept function addReward address rewardToken, address veAssetDeposits, address...
Product Show Room Site 1.0 Cross Site Scripting Vulnerability
Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: email protected inc Vendor Homepage: https://www.sourcecodester.com/php/15370/product-show-room-site-phpoop-free-source-code.html...
Product Show Room Site 1.0 Cross Site Scripting
Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: [email protected] inc Vendor Homepage:...
PT-2022-14232
Name of the Vulnerable Software and Affected Versions SourceCodester Product Show Room Site version 1.0 Description A problematic issue has been identified, affecting the "/admin/?page=system info/contact info" endpoint. The manipulation of the Telephone textbox with the input alert1 leads to...
WordPress IMDB info box plugin跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress IMDB info box plugin has a cross-site scripting vulnerability that stems from failure to clean and...
CVE-2022-27781
libcurl provides the CURLOPTCERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation...
CVE-2022-1294
The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-1294
The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-1294 IMDB info box <= 2.0 - Admin+ Stored Cross-Site Scripting
The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-13782
Name of the Vulnerable Software and Affected Versions IMDB info box WordPress plugin versions through 2.0 Description The issue allows high-privileged users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of some settings, even when the unfiltered html...
CVE-2022-1294: Improper Neutralization of Input During Web Page Generation
The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-37006
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves several functions: sc aux data free, sc pkcs15 free...
