PT-2023-15434 · WordPress · Cs&M Hover Image Plugin

Name of the Vulnerable Software and Affected Versions: Julian Weinert // cs&m Hover Image plugin versions 1.4.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...

m-link.cz Cross Site Scripting vulnerability OBB-3338809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m-five.de Cross Site Scripting vulnerability OBB-3322407

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

Improper access control

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41769

CVE-2022-41769 concerns the Intel® Connect M Android application prior to version 1.82, where an authenticated user may trigger an escalation of privilege via local access due to an improper access control vulnerability. The issue affects the application when installed on affected devices and can...

CVE-2022-41769

Improper access control in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41801

Intel® Connect M Android application prior to version 1.82 is affected by CVE-2022-41801, described as uncontrolled resource consumption that could allow an authenticated user to cause denial of service via local access. Affected product: Intel Connect M Android app before 1.82. Root cause: uncon...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41801

Uncontrolled resource consumption in the IntelR Connect M Android application before version 1.82 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-26126

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function...

Intel Connect M Android application 安全漏洞

Intel Connect M Android application is an application from Intel Corporation USA. A security vulnerability exists in the Intel Connect M Android application prior to version 1.82, which arises from incorrect access control and could allow an authenticated user to potentially enable privilege...

Intel® Connect M Android App Advisory

Summary: Potential security vulnerabilities in the Intel® Connect M Android application may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41801 Description: Uncontrolled...

Mitigation of M-04: Mitigation error

MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of M-04: Mitigation error Link to Issue: code-423n4/2023-03-asymmetry-findings932 Comments Even though the original issue is mitigated, as the exchange through Uniswap V3 has been completely removed in favor of using...

Mitigation Confirmed for Mitigation of M-10: Issue mitigated

Mitigated issue M-10: Stuck ether when use function stake with empty derivativesderivativeCount = 0 The issue was that stake will accept payment but not issue safETH when derivativeCount == 0 or when all weightsi == 0. Mitigation review The proposed mitigation simply adds a requirederivativeCount...