7259 matches found
WordPress Performag premium theme <= 1.200.9 - Unauthenticated Arbitrary File Upload and Option Deletion
Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Performag premium theme versions = 1.200.9. Solution Update the WordPress Performag premium theme to the latest available version at least 2.0.0...
WordPress Storied premium theme <= 1.97 - Unauthenticated Arbitrary File Upload and Option Deletion
Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Storied premium theme versions = 1.97. Solution Update the WordPress Storied premium theme to the latest available version at least 2.0.0...
All Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion
Thrive “Legacy” themes register a REST API endpoint to compress images using the Kraken image optimization engine. By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote...
WordPress Luxe premium theme <= 1.32 - Unauthenticated Arbitrary File Upload and Option Deletion
Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Luxe premium theme versions = 1.32. Solution Update the WordPress Luxe premium theme to the latest available version at least 2.0.0...
WordPress Minus premium theme <= 1.97 - Unauthenticated Arbitrary File Upload and Option Deletion
Unauthenticated Arbitrary File Upload and Option Deletion discovered by WordFence in WordPress Minus premium theme versions = 1.97. Solution Update the WordPress Minus premium theme to the latest available version at least 2.0.0...
All Thrive Themes and Plugins - Unauthenticated Option Update
The plugins and themes register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty apikey parameter in vulnerable versions if Zapier was not enabled. Attackers coul...
nodejs-angular: XSS due to regex-based HTML replacement
A XSS flaw was found in nodejs-angular. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
nodejs-angular: XSS due to regex-based HTML replacement
A XSS flaw was found in nodejs-angular. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
CVE-2021-27290
A flaw was found in ssri package. A malicious string provided by an attacker may lead to Regular Expression Denial of Service ReDoS. This issue only affects consumers using the strict option. The highest threat from this vulnerability is to availability...
The vulnerability of the SQLDriverConnect function in the ODBC library for UNIX UnixODBC, related to an exception that triggers outside the allowed data buffer limits, allows a malicious actor to cause a service failure.
The vulnerability of the SQLDriverConnect function in the ODBC library for UNIX systems is related to buffer overflows caused by a long string in the FILEDSN option. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SQLDriverConnect function in the ODBC library for UNIX UnixODBC, related to an exception that triggers outside the allowed data buffer limits, allows a malicious actor to cause a service failure.
The vulnerability of the SQLDriverConnect function in the ODBC library for UNIX systems is related to a buffer overflow caused by a long string in the DRIVER option. Exploiting this vulnerability can allow an attacker to cause a service failure...
Regular Expression Denial of Service (ReDoS)
npm ssri 5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option...
GHSA-VX3P-948G-6VHQ Regular Expression Denial of Service (ReDoS)
npm ssri 5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option...
CVE-2019-10196
A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an...
How to Force Secure and HttpOnly Cookie Options for Websites Using NetScaler Appliance
The web administrators may forceSecure and/orHttpOnly flags on the Session ID and the authentication cookies that are generated by the web applications. Modifying Set-Cookie headers to include these two options can be done using an http Load Balancing Virtual Server and Rewrite Policies on a...
GitLab 未授权RCE漏洞（CVE-2021-22192）
When rendering wiki content with certain extensions such as .rmd, renderwikicontent will call othermarkupunsafe which will end up calling GitHub::Markup.render from the github-markup gem. Files with any extension can be uploaded by checking out the wiki with git, commiting the files and pushing t...
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...
PT-2021-8006 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc1-00026-g73d464503354 Description: The issue is related to a potential deadlock between the hci dev-lock and socket lock in the Linux kernel's Bluetooth functionality. This deadlock can occur due to a...