14045 matches found
WordPress Smart Online Order for Clover Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)
Software Smart Online Order for Clover Type Plugin Vulnerable versions = 1.5.7 Fixed in 1.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8787 Patch priority Medium CVSS severity Medium 7.1 Developer Zaytech PSID ef2985b5f2b9 Credits vgo0 Require...
WordPress plugin Smart Online Order for Clover 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Smart Blocks versions = 2.0...
WordPress Smart Blocks Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
Software Smart Blocks Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49270 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fc8a42cfb8ae Credits João Pedro S Alcântara Kinorth Required...
PT-2024-38784 · Schneider Electric · Evlink Home Smart/Charge Firmware
Name of the Vulnerable Software and Affected Versions: Schneider Electric EVlink Home Smart/Charge Firmware affected versions not specified Description: A Cleartext Storage of Sensitive Information issue exists, exposing test credentials in the firmware binary. This could lead to data exposure. T...
Schneider Electric EVlink Home Smart和Schneider Charge 安全漏洞
Schneider Electric EVlink Home Smart and Schneider Charge are both products of Schneider Electric, a French company.Schneider Electric EVlink Home Smart is a smart home electric vehicle charger. The Schneider Charge is a smart electric vehicle charging station for the home designed with ease of...
OESA-2024-2245 opensc security update
OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to sma...
MercadoLibre: Es posible poder navegar a cualquier pagina en Point Smart application
The vulnerability allowed users to navigate outside the intended application environment through a link in the Point Smart application...
Wo-smart WoFit 安全漏洞
Wo-smart WoFit is an application from Wo-smart that provides data logging, tracking, and statistics for users' health and exercise fitness activities. A security vulnerability exists in Wo-smart WoFit version v.7.2.3, which stems from an issue that allows remote attackers to obtain sensitive...
Auto-Identification Smart Glasses
Two students have created a demo of a smart-glasses app that performs automatic facial recognition and then information lookups. Kind of obvious--something similar was done in 2011--but the sort of creepy demo that gets attention. News article...
CVE-2024-46539
Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...
WordPress Smart Post Show plugin <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination Color vulnerability
Authenticated Editor+ Stored Cross-Site Scripting via Pagination Color vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Post Grid, Post Carousel, & List Category Posts – by Smart Post Show versions = 3.0.0...
CVE-2024-46539
Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...
CVE-2024-46539
Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...
CVE-2024-46539
CVE-2024-46539 maps to insecure permissions in the BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3, enabling a nearby attacker to trigger a DoS due to BLE privilege issues. Root cause: insecure BLE permissions; impact: DoS with adjacent attack vector. A temporary workaround mentione...
CVE-2024-46040
IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
A week in security (September 30 – October 6)
Last week on Malwarebytes Labs: Facebook and Instagram passwords were stored in plaintext, Meta fined Android users targeted on Facebook and porn sites, served adware Fake Disney+ activation page redirects to pornographic scam Radiology provider exposed tens of thousands of patient files Not Blac...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
CVE-2024-46040
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is affected by Insufficient Session Expiration due to lack of validation of the authentication token during the Access Point Pairing mode. This enables an attacker to replay Wi-Fi provisioning packets and forcibly turn off the access point after the token e...