CVE-2022-2411

The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2411

CVE-2022-2411 affects the Auto More Tag WordPress plugin (versions prior to 4.0.1). The issue arises from insufficient sanitization/escaping of some settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) when unfiltered_html is disallowed (notably in multisite). Imp...

WordPress plugin Auto More Tag 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2022-16470 · WordPress · Auto More Tag

Name of the Vulnerable Software and Affected Versions: Auto More Tag WordPress plugin versions prior to 4.0.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed, for example in a...

多款AutomationDirect产品安全漏洞

AutomationDirect C-more EA9 HMI and so on are products of AutomationDirect, Inc.AutomationDirect C-more EA9 HMI is a series of touch screen panels.AutomationDirect DirectLOGIC is a programmable logic AutomationDirect SIO-MB04RTDS is a programmable logic controller. A security vulnerability exists...

Exploit for OS Command Injection in Apache Spark

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerabil...

no-more-insects.nl Cross Site Scripting vulnerability OBB-2795624

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2017-20135

A vulnerability classified as critical was found in Itech Dating Script 3.26. Affected by this vulnerability is an unknown functionality of the file /seemoredetails.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

PT-2022-8002 · Itech · Tech Dating Script

Name of the Vulnerable Software and Affected Versions: Itech Dating Script version 3.26 Description: A critical issue was found in the file /see more details.php, where the manipulation of the id argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

Ambit Technologies iTech Dating Script SQL注入漏洞

Ambit Technologies iTech Dating Script is a standalone PHP based software script by Ambit Technologies India. It provides users with an excellent experience when looking for a date! A security vulnerability exists in Ambit Technologies iTech Dating Script version 3.26, which stems from the presen...

The vulnerability of the DLL library of the Microprogramming Software for Sensor Panels from AutomationDirect C-More series EA9 HMI allows a hacker to execute arbitrary code during the installation process.

The vulnerability of the DLL library of C-More sensor panel microprogramming systems series EA9 HMI is related to an uncontrolled search path element. Exploiting this vulnerability could allow a attacker to execute arbitrary code during the installation process...

The vulnerability in the HTTP server of the microprogramming software for AutomationDirect C-More series of touchscreen HMI devices allows a hacker to disclose protected information.

The vulnerability of the HTTP server of the C-More EA9 HMI series of touchscreen software solutions is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

Microsoft Patch Tuesday June 2022: Follina RCE, NFSV4.1 RCE, LDAP RCEs and bad patches

Hello everyone! This will be an episode about the Microsoft vulnerabilities that were released on June Patch Tuesday and also between May and June Patch Tuesdays. Alternative video link for Russia: On June Patch Tuesday, June 14, 56 vulnerabilities were released. Between May and June Patch...

Malicious Package

Overview even-more-externals is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

MAL-2022-912 Malicious code in airbnb-moment-more-formats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc5557aeda1e237eee986fab6c89f75a48943ed94ccbf09254396eb5207ebd42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lengerich.more-rubin1.de Cross Site Scripting vulnerability OBB-2654927

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AutomationDirect C-more EA9 HMI 跨站脚本漏洞

The AutomationDirect C-more EA9 HMI is a series of touchscreen panels from AutomationDirect, Inc. A cross-site scripting vulnerability exists in the AutomationDirect C-more EA9 HMI, which arises from the use of an insecure mechanism to transfer credentials from the client to the web server, which...

PT-2022-3487 · Automationdirect · C-More Ea9

Name of the Vulnerable Software and Affected Versions: AutomationDirect C-more EA9 versions prior to 6.73 Description: The issue is related to the insecure mechanism used by the AutomationDirect C-more EA9 HTTP webserver to transport credentials from the client to the web server. This may allow a...

AutomationDirect C-more EA9 HMI 代码问题漏洞

AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A code issue vulnerability exists in the AutomationDirect C-more EA9 HMI that stems from a security issue in the installation directory that could allow an attacker to execute code during installation and...

MAL-2022-2889 Malicious code in even-more-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d88bdc74cdae01727c6412359657971e95af66b3580bb8c50c0a28540f34de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...