CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

Kiddoware Kids Place Parental Control for Android (≤3.8.49) is affected by CVE-2023-28153 and related issues (XSS, CSRF, file upload) per SEC Consult advisory. Fixed in 3.8.50. Upgrade to 3.8.50+ to mitigate. Exploitation details are documented in external advisories; no further in-document explo...

PT-2023-21599 · Kiddoware · Kiddoware Kids Place Parental Control

Name of the Vulnerable Software and Affected Versions: Kiddoware Kids Place Parental Control version prior to 3.8.50 Description: An issue in the Kiddoware Kids Place Parental Control application allows a child to temporarily remove all restrictions without the parents noticing. This can be...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

Kiddoware Kids Place 跨站脚本漏洞

Kiddoware Kids Place is an application with parental monitoring and child lock features from Kiddoware USA. A cross-site scripting vulnerability exists in Kiddoware Kids Place prior to version 3.8.50, which originates from disabling child application restrictions without parental notification,...

Kiddoware Kids Place 跨站脚本漏洞

Kiddoware Kids Place is an application with parental monitoring and child lock features from Kiddoware USA. A cross-site scripting vulnerability exists in Kiddoware Kids Place versions prior to 3.8.50, which stems from susceptibility to stored cross-site scripting XSS attacks...

Kiddoware Kids Place 跨站脚本漏洞

Kiddoware Kids Place is an application with parental monitoring and child lock features from Kiddoware USA. A cross-site scripting vulnerability exists in Kiddoware Kids Place versions prior to 3.8.50, which stems from susceptibility to stored cross-site scripting XSS attacks...

CVE-2023-27249

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swfGetPlaceObject at swfobject.c...

swfdump 缓冲区错误漏洞

swfdump is a utility program for working with Adobeu200bu200be Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in swfdump version v0.9.2, which stems from the inclusion of a heap buffer overflow in the function swfGetPlaceObject in swfobject.c...

WordPress Search in Place Plugin <= 1.0.104 is vulnerable to Other Vulnerability Type

Software Search in Place Type Plugin Vulnerable versions = 1.0.104 Fixed in 1.0.105 OWASP Top 10 A5: Broken Access Control Classification Other Vulnerability Type CVE CVE-2023-26521 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e57d979e5122 Credits István Márton Required...

SUSE CVE-2021-40403

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

kernel: crypto: qat - fix DMA transfer direction

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix DMA transfer direction When CONFIGDMAAPIDEBUG is selected, while running the crypto self test on the QAT crypto algorithms, the function adddmaentry reports a warning similar to the one below, saying that...

Rapid7 Recognized as a Top Place to Work for 11th Consecutive Year

On November 30th, 2022, Rapid7 was again recognized by The Boston Globe as a Top Place to Work in Massachusetts. This marks the 11th consecutive year Rapid7 has made the list, this time coming in at 3 in the large company category. Top Places to Work rankings are based on a Globe survey that...

Debian dla-3210 : gerbv - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3210 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected]...

CVE-2022-43046

Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...

CVE-2022-43046

Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...

PT-2022-26728 · Unknown · Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: Food Ordering Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the /foms/place-order.php component. This type of vulnerability allows attackers to inject malicious scripts in...

CVE-2022-30004

Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection...

Sql injection

Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection...

CVE-2022-30004

CVE-2022-30004 affects Sourcecodester Online Market Place Site, version 1.0, describing an unauthenticated blind SQL injection vulnerability that enables remote attackers to dump the SQL database via time-based SQL injection. Root cause is improper handling of SQL queries in the application, allo...