36 matches found
CVE-2023-25442 WordPress Zeno Font Resizer Plugin <= 1.7.9 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Marcel Pol Zeno Font Resizer plugin = 1.7.9 versions...
CVE-2023-23994
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...
CVE-2023-23994
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...
CVE-2023-23994 WordPress Auto Hide Admin Bar Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...
CVE-2023-23994
The CVE-2023-23994 entry concerns the WordPress plugin Marcel Bootsman Auto Hide Admin Bar, vulnerable in versions <= 1.6.1. It is a Stored Cross-Site Scripting (XSS) flaw that requires authentication with admin+ privileges. The root cause is an XSS vulnerability in the plugin’s handling of in...
marcel-mezy-environnement.com Cross Site Scripting vulnerability OBB-3075033
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
saint-marcel.bzh Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1050866 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting saint-marcel.bzh website...
marcel-huber.de XSS vulnerability
Open Bug Bounty ID: OBB-700645 Description| Value ---|--- Affected Website:| marcel-huber.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
Ruby on Rails: XSS by MathML at Active Storage
In Active Storage, formats treated as binary have been confirmed, It does not contain application/mathml+xml. https://github.com/rails/rails/commit/d40284b1a44773b03d78ca67a888b94fd330d1b1 In Marcel::MimeType.for, if content-type can not be determined with magic byte, since it is determined using...
Ubuntu: Security Advisory (USN-3637-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : WavPack vulnerabilities (USN-3637-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3637-1 advisory. Thuan Pham, Marcel Bhme, Andrew Santosa and Alexandru Razvan Caciulescu discovered that WavPack incorrectly handled certain .wav files. An attacker could...
Realpin,1.5.04,SQL Injection
Realpin by Marcel Törpe, versions 1.5.04 and previous, SQL Injection...
WordPress Plugin Gwolle Guestbook 1.5.3 - Remote File Inclusion
Advisory ID: HTB23275 Product: Gwolle Guestbook WordPress Plugin Vendor: Marcel Pol Vulnerable Versions: 1.5.3 and probably prior Tested Version: 1.5.3 Advisory Publication: October 14, 2015 without technical details Vendor Notification: October 14, 2015 Vendor Patch: October 16, 2015 Public...
WordPress Gwolle Guestbook 1.5.3 Remote File Inclusion
Advisory ID: HTB23275 Product: Gwolle Guestbook WordPress Plugin Vendor: Marcel Pol Vulnerable Versions: 1.5.3 and probably prior Tested Version: 1.5.3 Advisory Publication: October 14, 2015 without technical details Vendor Notification: October 14, 2015 Vendor Patch: October 16, 2015 Public...
Infamous hacker "Guccifer" arrested in Romania; charged with multiple cyber crimes
"Guccifer" arrested in Romania, the infamous hacker who was responsible for breaching the social media and email accounts of numerous high profile US and Romanian Politicians. Romanian authorities collaborated with US services to catch him and the officers of the Directorate for Investigating...
[SA19868] Linux Kernel CIFS chroot Directory Traversal Vulnerability
TITLE: Linux Kernel CIFS chroot Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19868 VERIFY ADVISORY: http://secunia.com/advisories/19868/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTIO...