156 matches found
WordPress WP Meta and Date Remover Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Software WP Meta and Date Remover Type Plugin Vulnerable versions 2.2.0 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4823 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID e96e6b729f00 Credits dc11 Requir...
WordPress WP Meta and Date Remover Plugin < 1.9.10 is vulnerable to Cross Site Scripting (XSS)
Software WP Meta and Date Remover Type Plugin Vulnerable versions 1.9.10 Fixed in 1.9.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2f546a378ae2 Credits Rafie Muhammad Patchsta...
CVE-2023-25795
Auth. admin+ Cross-Site Scripting XSS vulnerability in WP-master.Ir Feed Changer & Remover plugin = 0.2 versions...
CVE-2023-25795
Auth. admin+ Cross-Site Scripting XSS vulnerability in WP-master.Ir Feed Changer & Remover plugin = 0.2 versions...
CVE-2023-25795
Auth. (admin+) Cross-Site Scripting (XSS) in WP-master.Ir Feed Changer & Remover plugin
WordPress Plugin master.Ir Feed Changer & Remover 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Malicious code in discord-intents-remover (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13a7cb18d6784d0246c48ad6684dec3c734298939606f0f56a11cefd58e1adc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2482 Malicious code in discord-intents-remover (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f13a7cb18d6784d0246c48ad6684dec3c734298939606f0f56a11cefd58e1adc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks
QNAP, Taiwanese maker of network-attached storage NAS devices, on Wednesday said it's in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code execution. "A vulnerability has been reported to affect PHP versions 7.1.x below 7.1.33, 7.2.x bel...
VulnCheck KEV: CVE-2020-36198
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...
WordPress WP Meta and Date Remover plugin < 1.9.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Meta and Date Remover plugin versions 1.9.6. Solution Update the WordPress WP Meta and Date Remover plugin to the latest available version at least 1.9.6...
CleanMyMac X: Performance and Security Software for Macbook
We use Internet-enabled devices in every aspect of our lives today—to find information, shop, bank, do homework, play games, and keep in touch with friends and family. As a result, our devices contain much personal information about us. Also, any great device will get a little clunky and slow ove...
The vulnerability of the Malware Remover tool lies in its improper handling of certain elements at the administrative level, allowing attackers to execute arbitrary commands and increase their privileges.
The vulnerability of the Malware Remover tool is related to improper elimination of certain elements at the operating level when processing TAR files in the file system. Exploiting this vulnerability allows an attacker to execute arbitrary commands and increase their privileges...
QNAP NAS Malware Remover Command Injection Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of QNAP NAS. Authentication is required to exploit this vulnerability. The specific flaw exists within the Malware Remover application. A crafted TAR file in the file system can trigger execution of a syste...
CVE-2020-36198
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...
CVE-2020-36198
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...
Command injection
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...
CVE-2020-36198 Command Injection Vulnerability in Malware Remover
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...
CVE-2020-36198
CVE-2020-36198 affects certain versions of QNAP’s Malware Remover (prior to 4.6.1.0). The vulnerability enables remote command execution via the Malware Remover/Music Station components (root cause involves command injection in modules used by malware-removal tooling). Connected reports describe ...
Qnap Systems Malware Remover 操作系统命令注入漏洞
Qnap Systems Malware Remover is an application from the Chinese company Qnap Systems. A malware removal tool. An operating system command injection vulnerability exists in Qnap Systems Malware Remover prior to version 4.6.1.0. A remote attacker could exploit this vulnerability to execute arbitrar...