WordPress Olympus Shortcodes Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Olympus Shortcodes Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51857 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID aec746b4a78a Credits SOPROBRO Required privilege Contribut...

SUSE CVE-2012-2837

The mnoteolympusentrygetvalue function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service divide-by-zero error via an image with crafted EXIF tags that are not properly handled during the formatting of EX...

Network Olympus SQL Injection Vulnerability

Network Olympus is Softinventive Lab's enterprise network for agentless monitoring. Network Olympus version 1.8.0 is vulnerable to SQL injection, which stems from a missing sqlparameter JSON parameter in /api/eventinstance validation of external input SQL statements. An attacker could exploit thi...

CVE-2022-25225

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...

CVE-2022-25225

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...

CVE-2022-25225

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...

Remote code execution

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...

Network Olympus SQL注入漏洞

Network Olympus is Softinventive Lab's enterprise network for agentless monitoring. Network Olympus version 1.8.0 is vulnerable to SQL injection, which stems from a missing sqlparameter JSON parameter in /api/eventinstance validation of external input SQL statements. An attacker could exploit thi...

CVE-2022-25225

Network Olympus 1.8.0 is vulnerable to SQL injection in the /api/eventinstance endpoint via the sqlparameter JSON field, exploitable by an authenticated admin. The issue can also lead to remote code execution in a default PostgreSQL installation. Root cause: lack of input validation/parameter han...

CVE-2022-25225

Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation PostgreSQL by exploiting this issue...

BlackMatter Ransomware Hits Japanese Tech Giant Olympus

Japanese technology giant Olympus is currently investigating a cyber incident on its EMEA IT systems that happened earlier this month that sources said is the result of a BlackMatter ransomware attack. The company detected “suspicious activity” on Sept. 8 and “immediately mobilized a specialized...

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...

Security update for perl-Image-ExifTool (important)

openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Threatlist: Dark Web Markets See an Evolution in Q3

In the wake of Hansa and AlphaBay being dismantled on the Dark Web, Dream Markets and Wall Street Market have become the largest marketplaces in the criminal underground, according to Q3 analysis from McAfee. Meanwhile, vulnerabilities and stolen credentials continue to dominate the cybercriminal...

olympus-europa.com XSS vulnerability

Vulnerable URL: https://www.olympus-europa.com/medical/en/medicalsystems/productsservices/productselectormain1.jsp?producttype=1091=3465=3584=empty=values083==rel Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS...

olympus.co.nz Open Redirect vulnerability

Vulnerable URL: http://www.olympus.co.nz/Document/Url/?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 7651016 VIP website status:| No...

olympus.co.uk XSS vulnerability

Vulnerable URL: https://www.olympus.co.uk/search/searchresults.jsp?weblocale=en%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirm'OPENBUGBOUNTY'%20//%3E%3CSvg%3E=GB Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

olympus.co.uk XSS vulnerability

Vulnerable URL: https://www.olympus.co.uk/corporate/en/presscentre/presscentreoverview.jsp?c==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

olympus.com.ru XSS vulnerability

Vulnerable URL: https://www.olympus.com.ru/corporate/ru/presscentre/imagesandmedia/medialibrary.jsp?c=2436=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...