CVE-2023-23706

CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions

WordPress plugin: WordPress Social Login and Register – Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Social Login and...

PT-2023-19145

Name of the Vulnerable Software and Affected Versions miniOrange WordPress Social Login and Register plugin versions prior to 7.5.14 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

CVE-2023-23706: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...

kernel: regmap: spi: Reserve space for register address/padding

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI regmap subsystem. The calculation of maximum transfer limits fails to account for the overhead of register addresses and padding during raw read and write operations. A local user could exploit this flaw to transmit messages...

Medium: kernel

Issue Overview: bpf: incorrect verifier pruning due to missing register precision taints, which may lead to out-of-band read/write access due to an incorrect verifier conclusion. CVE-2023-2163 A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the...

File Tracker Manager System SQL Injection Vulnerability

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...

WordPress WP Register Profile With Shortcode Plugin <= 3.5.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Register Profile With Shortcode Type Plugin Vulnerable versions = 3.5.8 Fixed in 3.5.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23818 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a5f4f1aaab08 Credits Rio...

File Tracker Manager System SQL Injection Vulnerability

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...

PT-2023-20626 · Unknown · Sourcecodester File Tracker Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A critical issue was found in the SourceCodester File Tracker Manager System. This issue affects the file register/update password.php of the component POST Parameter Handler...

PT-2025-38026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the networking subsystem related to the fec driver. Specifically, the issue arises when pm runtime get fails within the .remove function. This failure...

CVE-2023-2643: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

register-here.com Cross Site Scripting vulnerability OBB-3315237

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Input validation

Insufficient input validation on the model specific register: VMHSAVEPA may potentially lead to loss of SEV-SNP guest memory integrity...

CVE-2022-23818

CVE-2022-23818 concerns insufficient input validation on the model-specific register VM_HSAVE_PA, potentially compromising SEV-SNP guest memory integrity. Affected stack is AMD SEV-SNP/ASP components; container of issue is documented across NVD and AMD security bulletin AMD-SB-3001. Mitigations: ...

CVE-2022-23818

Insufficient input validation on the model specific register: VMHSAVEPA may potentially lead to loss of SEV-SNP guest memory integrity...

kernel: regmap: spi: Reserve space for register address/padding

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI regmap subsystem. The calculation of maximum transfer limits fails to account for the overhead of register addresses and padding during raw read and write operations. A local user could exploit this flaw to transmit messages...

kernel: Kernel: Denial of Service via recursive deadlock in L2TP tunnel registration

A flaw was found in the kernel. A local user can exploit this vulnerability by passing a pppol2tp socket file descriptor as a UDP socket file descriptor during L2TP tunnel registration. This can cause a recursive deadlock, leading to a denial of service DoS on the system...

kernel: drivers/base/node.c: fix compaction sysfs file leak

In the Linux kernel, the following vulnerability has been resolved: drivers/base/node.c: fix compaction sysfs file leak Compaction sysfs file is created via compactionregisternode in registernode. But we forgot to remove it in unregisternode. Thus compaction sysfs file is leaked. Using...

Vim code issues and vulnerabilities

Vim is a cross-platform text editor. A code issue vulnerability exists in Vim versions prior to 9.0.1531, which stems from a null pointer dereference in getregister in register.c:311. An attacker could exploit this vulnerability to cause a denial of service attack...