Cross site scripting

The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example ...

Cross site scripting

The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite setup...

CVE-2022-1029 Limit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting

The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite...

CVE-2022-33202

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

CVE-2022-33202

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

Authentication flaw

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

CVE-2022-33202

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup PoC Put the following payload in the "Ignored Download...

PT-2022-38108

Уязвимость функции tick nohz full setup модуля kernel/time/tick-sched.c подсистемы таймера ядра операционной системы Linux связана с некорректной инициализацией. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-13602

Name of the Vulnerable Software and Affected Versions Limit Login Attempts WordPress plugin versions prior to 4.0.72 Description The issue allows malicious users with administrator privileges to store malicious Javascript code, leading to Cross-Site Scripting attacks when unfiltered html is...

CVE-2022-33202: Improper Authentication

Authentication bypass vulnerability in the setup screen of L2Blockeron-premise Ver4.8.5 and earlier and L2BlockerCloud Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative path...

PT-2022-21739

Name of the Vulnerable Software and Affected Versions L2Blockeron-premise versions 4.8.5 and earlier L2BlockerCloud versions 4.8.5 and earlier Description The issue allows an adjacent attacker to bypass authentication in the setup screen, potentially leading to unauthorized login, access to store...

PT-2025-8608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue arises from the combination of EXPORT SYMBOL and init annotations in the tick nohz full setup function. This combination ...

Intel Setup and Configuration Software Information Disclosure

The vulnerability of the Intel Setup and Configuration Software SCS data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, is related to insufficient protection of registration data...

Malicious code in ykeykey-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234eec78ac053b64b3e9a940d19743115698ac232ac124fafc4c843ba553b645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7353 Malicious code in ykeykey-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234eec78ac053b64b3e9a940d19743115698ac232ac124fafc4c843ba553b645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in setup-kubectl-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d762845821324e1b8cd4eef7102615a636294d5d6f635c8f754d7ed87077f28e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6039 Malicious code in setup-kubectl-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d762845821324e1b8cd4eef7102615a636294d5d6f635c8f754d7ed87077f28e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onboarding-setup-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f460bd48ceadd7fb61e181dbe4b1691bed7bffdf1a8137a52f1b2d90a40914c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5073 Malicious code in onboarding-setup-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f460bd48ceadd7fb61e181dbe4b1691bed7bffdf1a8137a52f1b2d90a40914c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...