WordPress Woo Billingo Plus and Integration for Billingo & Gravity Forms Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Woo Billingo Plus version 4.4.5.4 or earlier, Integration for Billingo & Gravity Forms...

Microsoft File Systems IBM Spectrum Protect Plus Disclosure

The vulnerability of the backup and recovery functions of Microsoft’s file systems in the IBM Spectrum Protect Plus data protection platform is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to...

ManageEngine Access Manager Plus < 4.3 Build 4303 RCE

The remote host is running a version of ManageEngine Access Manager Plus prior to 4.3 Build 4303. It is, therefore, affected by an authenticated remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versi...

CVE-2022-41033

Windows COM+ Event System Service Elevation of Privilege Vulnerability...

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability...

VulnCheck KEV: CVE-2022-41033

Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation...

PT-2022-5402 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the Microsoft Windows COM+ Event System Service. It is caused by a buffer overflow in memory, which can be exploite...

CVE-2022-3154

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

CVE-2022-3154: Cross-Site Request Forgery (CSRF)

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

WordPress plugin Woo Billingo Plus has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Woo Billingo Plus version 4.4.5.4 or earlier, Integration for Billingo & Gravity Forms...

CVE-2022-3154

CVE-2022-3154 affects multiple WordPress plugins related to Billingo integration: Woo Billingo Plus (pre-4.4.5.4), Integration for Billingo & Gravity Forms (pre-1.0.4), and Integration for Szamlazz.hu & Gravity Forms (pre-1.2.7). The root cause is lack of CSRF checks in various AJAX actions, enab...

Administrative Console Framework Code Execution

The vulnerability of the Administrative Console Framework of the IBM Spectrum Protect Plus software protection platform lies in the lack of measures to neutralize special elements entered by the user during syntax analysis of password parameters. Exploiting this vulnerability allows a remote...

Administrative Console Framework Code Execution

The vulnerability of the Administrative Console Framework of the IBM Spectrum Protect Plus software protection platform lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute...

Joomla Rentalot Plus 19.05 Cross Site Scripting Vulnerability

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ┌┘ Exploits ┌┘ └───────────────────────────────────────────────────────────────────────────────────────┘┘ : Author : CraCkEr : │ Website : extensions.joomla.org │ │ Vendor : Les Arbres Design │ │ Software :...

Joomla Rentalot Plus 19.05 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Exploit for Missing Authentication for Critical Function in Zohocorp Manageengine_Servicedesk_Plus

Golang-CVE-2021-44077-POC This exploit is an unauthe...

CVE-2022-32168 notepad-plus-plus - DLL Hijacking

Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll UxTheme.dll with his own dll and run arbitrary code in the context of Notepad++...

Notepad++ code issues and vulnerabilities

Notepad++ is an open source plain text editor by Don Ho, an individual developer in Taiwan, China. A code issue vulnerability exists in Notepad++ 8.4.1 and earlier versions, which stems from susceptibility to DLL hijacking, and can be exploited to replace a vulnerable dll UxTheme.dll with a dll o...

Zoho ManageEngine Password Manager Pro XMLRPC Code Execution

The vulnerability of the xmlrpc component in the Zoho ManageEngine Password Manager Pro and Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing functions is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could all...

GHSA-8GQ9-2X98-W8HF protobuf-cpp and protobuf-python have potential Denial of Service issue

Summary A message parsing and memory management vulnerability in ProtocolBuffer’s C++ and Python implementations can trigger an out of memory OOM failure when processing a specially crafted message, which could lead to a denial of service DoS on services using the libraries. Reporter: ClusterFuzz...