936 matches found
Rocket.Chat 输入验证错误漏洞
Rocket.Chat is an open source team chat software. Rocket.Chat suffers from an input validation error vulnerability that stems from a failure to type validate input data in the getUsersOfRoom Meteor server method. An authenticated attacker could use this vulnerability to enumerate existing rooms a...
Social Rocket < 1.3.3 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Logged in the backend of Wordpress as...
WordPress Social Rocket plugin <= 1.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Social Rocket plugin versions = 1.3.2. Solution Update the WordPress Social Rocket plugin to the latest available version at least 1.3.3...
Rocket LMS 1.6 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Rocket LMS 1.6 Cross Site Scripting Vulnerability
Exploit Title: Rocket LMS - Learning Management System Reflected Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04...
Rocket LMS 1.6 Shell Upload Vulnerability
Exploit Title: Rocket LMS - Learning Management System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04 base64 encode your...
Rocket LMS 1.6 Shell Upload
Exploit Title: Rocket LMS - Learning Management System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04 base64 encode your...
Rocket LMS 1.6 Cross Site Scripting
Exploit Title: Rocket LMS - Learning Management System Reflected Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04...
CVE-2022-34632
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala...
CVE-2022-34632
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala...
CVE-2022-34632
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala...
Design/Logic Flaw
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala...
CVE-2022-34632
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.scala...
CVE-2022-34632
The CVE-2022-34632 entry concerns Rocket-Chip where commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 contains insufficient cryptography in the /rocket/RocketCore.scala component. Affected: Rocket-Chip/RocketCore.scala (part of Rocket-Chip design generator). Root cause: insecure cryptographic imple...
Rocket Chip 加密问题漏洞
Rocket Chip is an open source Sysem-on-Chip design generator. A security vulnerability exists in Rocket Chip that stems from an insecure encryption issue in the /rocket/RocketCore.scala component...
Malicious code in free-rocket-league-codes-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431322dc12efb1d6f334ef50376e028b11cd1c48df5be1f6bb4b5d11290f64ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3198 Malicious code in free-rocket-league-codes-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431322dc12efb1d6f334ef50376e028b11cd1c48df5be1f6bb4b5d11290f64ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5835 Malicious code in rocket-league-credits-hakc-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07de2630bcb7a21cf1f16c9305bb3ed4f5df54d95924e14da883d3c9e71c1899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3200 Malicious code in free-rocket-league-keys-hakc-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8205125ead9e5e4916979c85dd074d467a3f09a6f272ab0663c840164a9a8ea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3199 Malicious code in free-rocket-league-credits-keys-no-human-verification-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2dc423a59b4cd9be52a50d37452c45c625773689c3a350283ab1421126aa8d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...