3718 matches found
quick-jobs.com Cross Site Scripting vulnerability OBB-3224459
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-18231 · Google · Android 12 +1
Name of the Vulnerable Software and Affected Versions: Quick Share Agent versions prior to 3.5.14.18 in Android 12 Quick Share Agent versions prior to 3.5.16.20 in Android 13 Description: The issue allows a local attacker to access the MAC address without the required permission, potentially...
CVE-2023-21462
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission...
CVE-2023-21462
Quick Share Agent on Android 12 and 13 exposes MAC address to local attackers without required permissions. Affected versions: prior to 3.5.14.18 on Android 12, and prior to 3.5.16.20 on Android 13. The issue is a sensitive information exposure vulnerability; root cause details are not specified ...
Samsung Mobile Devices security vulnerabilities
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile Devices Quick Share Agent version 3.5.14.18, which stems from a sensitive information exposure vulnerability...
CVE-2023-21462: Insertion of Sensitive Information Into Debugging Code
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission...
CVE-2023-23927 Craft CMS stored cross-site scripting vulnerability
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting XSS happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7...
CVE-2023-23927
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting XSS happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7...
CVE-2023-23927 Craft CMS stored cross-site scripting vulnerability
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting XSS happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7...
PT-2023-19301
Name of the Vulnerable Software and Affected Versions Craft versions prior to 4.3.7 Description The issue occurs when a payload is inserted inside a label name or instruction of an entry type, resulting in a cross-site scripting XSS attack in the quick post widget on the admin dashboard...
CVE-2023-23927: Improper Neutralization of Input During Web Page Generation
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting XSS happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7...
CVE-2023-23974
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
CVE-2023-23974
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
CVE-2023-23974
The CVE-2023-23974 entry details a CSRF vulnerability in the WordPress plugin Fullworks Quick Event Manager
CVE-2023-23974 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
PT-2023-19329
Name of the Vulnerable Software and Affected Versions Fullworks Quick Event Manager plugin versions = 9.7.4 Description The issue is a Cross-Site Request Forgery CSRF vulnerability affecting all registration actions, including delete, delete all, edit, and update. Recommendations For versions =...
CVE-2023-23974: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Fullworks Quick Event Manager plugin = 9.7.4 affecting all registration actions delete, delete all, edit, update...
