m-tron.at Cross Site Scripting vulnerability OBB-3293269

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Shanling MTouch OS 路径遍历漏洞

Shanling MTouch OS is a music player from Shanling, China. A security vulnerability exists in Shanling M5S Portable Music Player in Shanling MTouch OS v4.3 and Shanling M2X Portable Music Player in Shanling MTouch OS v3.3. An attacker can exploit the vulnerability to arbitrarily read, delete, or...

CVE-2023-23892

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...

CVE-2023-23892 WordPress M Chart Plugin <= 1.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...

CVE-2023-23892

CVE-2023-23892 affects the WordPress plugin “M Chart” by Jamie Poitra. Versions 1.9.4, specifically 1.10, to mitigate. Reported impact is confined to XSS with a Moderate CVSS baseline in public sources, and there is no explicit public exploitation detail in the provided documents. Recommend appl...

PT-2023-19286 · Unknown · Jamie Poitra M Chart Plugin

Name of the Vulnerable Software and Affected Versions: Jamie Poitra M Chart plugin versions 1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There...

WordPress Plugin M Chart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

M-Files Resource Management Error Vulnerability

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...

CVE-2023-2112

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

CVE-2023-2112

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

CVE-2023-0383

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0383

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0384

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

CVE-2023-0383

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

CVE-2023-0384

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

CVE-2023-0384

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

Code injection

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job...

Memory corruption

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption...

Design/Logic Flaw

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...

CVE-2023-2112

The CVE-2023-2112 issue affects M-Files’ Desktop component service, where versions prior to 23.4.12455.0 permit lateral movement between sessions. The vulnerability is tied to the desktop component, enabling session-to-session movement with local attack potential. According to the publicly docume...