676 matches found
CVE-2020-11548
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
CVE-2020-11548
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
Remote code execution
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
EUVD-2020-3899
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
CVE-2020-11548
The CVE-2020-11548 entry concerns the WordPress Search Meter plugin (versions up to 2.13.2). The vulnerability stems from accepting user input in the search bar that can be treated as a formula, enabling remote code execution via CSV injection when performing a wp-admin/index.php?page=search-mete...
CVE-2020-11548
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
CVE-2020-11548: Improper Neutralization of Formula Elements in a CSV File
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed...
Wordpress Plugin Search Meter 2.13.2 - CSV injection
Wordpress Plugin Search Meter 2.13.2 - CSV injection Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection Google Dork: N/A Date: 2020-03-10 Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://thunderguy.com/semicolon/ Software Link:...
WordPress Plugin Search Meter 2.13.2 - CSV injection
Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection Google Dork: N/A Date: 2020-03-10 Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://thunderguy.com/semicolon/ Software Link: https://downloads.wordpress.org/plugin/search-meter.2.13.2.zip Version: 2.13.2 Tested on:...
WordPress Search Meter 2.13.2 CSV Injection
Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection Google Dork: N/A Date: 2020-03-10 Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://thunderguy.com/semicolon/ Software Link: https://downloads.wordpress.org/plugin/search-meter.2.13.2.zip Version: 2.13.2 Tested on:...
Wordpress Search Meter 2.13.2 Plugin - CSV injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Search Meter 2.13.2 - CSV Injection Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://thunderguy.com/semicolon/ Software Link: https://downloads.wordpress.org/plugin/search-meter.2.13.2.zip Version...
Search Meter < 2.13.3 - CSV Injection
A CSV Injection vulnerability was discovered in the Search Meter WordPress plugin. Version 2.13.2 and possibly earlier versions of the plugin was found to be affected. According to the reporter, the issue was reported to the plugin's author but they did not respond...
SQL Injection Vulnerability in Intelligent Meter Management System of Qingdao Automation Instrument Co.
Intelligent meter cluster management system is an industrial control management system that controls statistics and manages some of the data in the energy industry. There is a SQL injection vulnerability in the Intelligent Instrumentation System of Qingdao Automation Instrumentation Co., Ltd, whi...
openssh: Missing character encoding in progress display allows for spoofing of scp client output
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...
Schneider Electric ION8650 Power Meter Detection
Binary data 764562.prm...
Schneider Electric ION8650 Power Meter Detection
Binary data 764565.prm...
Schneider Electric ION8650 Power Meter Detection
Binary data 764567.prm...
Schneider Electric ION8650 Power Meter Detection
Binary data 764574.prm...