8514 matches found
CVE-2020-36739
The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the myftsfbloadmore function. This makes it possible for unauthenticated...
CVE-2021-4384
The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...
PT-2023-11879 · WordPress · Feed Them Social
Name of the Vulnerable Software and Affected Versions: Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress versions up to, and including, 2.8.6 Description: The issue is due to missing or incorrect nonce validation on the my fts fb load more function, making it possible...
WordPress Plugin Feed Them Social – Page, Post, Video, and Photo Galleries 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site request forgery...
[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-15.fc37
This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...
PT-2023-18008 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the load dt data function of storage.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution privilege...
How to Block HTTP TRACE Method by Using Responder Policy
This article describes how to use responder policy to block http trace method when clients access origin web servers behind lb virtual server...
Fedora: Security Advisory for trafficserver (FEDORA-2023-92686b3e8b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Supsystic Popup < 1.10.19 - Prototype Pollution
The plugin has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype. 1 Create a pop-up that is set to load on any page 2 Go to http://example.com/?protopoc=polluted 3 Open browser console 4 Type poc and see polluted as the result...
GHSA-6643-H7H5-X9WH Langchain vulnerable to arbitrary code execution
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
Code injection
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
PYSEC-2023-92
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
PYSEC-2023-92
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
PT-2023-24914 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: Langchain version 0.0.171 Description: The issue concerns arbitrary code execution in the load prompt function. This allows for potentially malicious code to be executed, posing a significant risk. Recommendations: For Langchain version...
The vulnerability of the LabelDict::Load function in the XML data compression tool Xmill allows a attacker to execute arbitrary code.
The vulnerability of the LabelDict::Load function in the XML data compression tool Xmill is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
TinyMCE Custom Styles < 1.1.4 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Go to "Settings" » "TinyMCE Custom Styles"...
PT-2023-24185 · Code Projects · Agro-School Management System
Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A critical issue has been found in the Agro-School Management System, affecting some unknown functionality of the file loaddata.php. The manipulation of the subject/course...
