CVE-2022-1329

WP Elementor 3.6.0/1/2 リモートコード実行 root@kitploit: Google Dork: なし 日付: 2022年4月16日 エクスプロイト作者: AkuCyberSec https://github.com/AkuCyberSec ベンダーホームページ: https://elementor.com/ ソフトウェアリンク: https://wordpress.org/plugins/elementor/advanced/ スクロールダウンしてバージョンを選択 バージョン: 3.6.0, 3.6.1, 3.62 テスト環境: WordPress 5.9.3...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 원격 코드 실행 root@kitploit: 날짜: 2023년 4월 16일 공격자: Việt Hùng https://github.com/phanthibichtram12 공급자 홈페이지: https://elementor.com/ 소프트웨어 링크: https://wordpress.org/plugins/elementor/advanced/ 아래로 스크롤하여 버전 선택 버전: 3.6.0, 3.6.1, 3.62 테스트 환경: WordPress 5.9.3 이...

The Swap action will always fail if the value of the deposited IBC asset is less than the value of autoSwapThreshold Canto

Lines of code Vulnerability details Impact The Swap action will always fail if the value of the deposited IBC asset the value of autoSwapThreshold Canto. This is not a bug, but it's very inconvenient for users and makes the goal of the onboarding module fail. Let's asssume that: 1 Canto = 0.1 USD...

Lack of deadline parameter when executing swaps

Lines of code Vulnerability details Impact Deadline is not checked. The transaction may stay unexecuted for a long time, resulting in unfavourable trade when the transaction is finally executed. Proof of Concept The function OnRecvPacket is used to help users outside of Canto onboard seamlessly...

The vulnerability of the “onboarding” module of the Elementor Website Builder plugin in the WordPress content management system allows attackers to execute cross-site scripting attacks.

The vulnerability of the “onboarding” module of the Elementor Website Builder plugin in the WordPress content management system is related to insufficient protection of the website’s structure. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks...