PT-2023-3468 · WordPress · Wordpress Social Login/Register

Name of the Vulnerable Software and Affected Versions: WordPress Social Login and Register plugin versions up to and including 7.6.4 Description: The issue is related to an authentication bypass in the WordPress Social Login and Register plugin. This is due to insufficient encryption on the user...

Agt Teknik Ceppatron SQL注入漏洞

Agt Teknik Ceppatron is a cash register device from Agt Teknik. Agt Teknik Ceppatron suffers from a SQL injection vulnerability that arises from the use of special elements that are not among and allow commands to be executed via SQL injection...

CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

CVE-2023-23706

CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions

WordPress plugin WordPress Social Login and Register 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Social Login and...

CVE-2023-23706: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

kernel: regmap: spi: Reserve space for register address/padding

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...

Medium: kernel

Issue Overview: bpf: incorrect verifier pruning due to missing register precision taints, which may lead to out-of-band read/write access due to an incorrect verifier conclusion. CVE-2023-2163 A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the...

File Tracker Manager System SQL Injection Vulnerability

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...

WordPress WP Register Profile With Shortcode Plugin <= 3.5.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Register Profile With Shortcode Type Plugin Vulnerable versions = 3.5.8 Fixed in 3.5.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23818 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a5f4f1aaab08 Credits Rio...

File Tracker Manager System SQL注入漏洞

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...

PT-2023-20626 · Unknown · Sourcecodester File Tracker Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A critical issue was found in the SourceCodester File Tracker Manager System. This issue affects the file register/update password.php of the component POST Parameter Handler...

PT-2025-38026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the networking subsystem related to the fec driver. Specifically, the issue arises when pm runtime get fails within the .remove function. This failure...

CVE-2023-2643: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

register-here.com Cross Site Scripting vulnerability OBB-3315237

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Input validation

Insufficient input validation on the model specific register: VMHSAVEPA may potentially lead to loss of SEV-SNP guest memory integrity...

CVE-2022-23818

Insufficient input validation on the model specific register: VMHSAVEPA may potentially lead to loss of SEV-SNP guest memory integrity...

CVE-2022-23818

CVE-2022-23818 concerns insufficient input validation on the model-specific register VM_HSAVE_PA, potentially compromising SEV-SNP guest memory integrity. Affected stack is AMD SEV-SNP/ASP components; container of issue is documented across NVD and AMD security bulletin AMD-SB-3001. Mitigations: ...

kernel: Kernel: Denial of Service via recursive deadlock in L2TP tunnel registration

A flaw was found in the kernel. A local user can exploit this vulnerability by passing a pppol2tp socket file descriptor as a UDP socket file descriptor during L2TP tunnel registration. This can cause a recursive deadlock, leading to a denial of service DoS on the system...

kernel: regmap: spi: Reserve space for register address/padding

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...