WordPress SmartLink Dynamic URLs Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software SmartLink Dynamic URLs Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51657 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2370d451d4d5 Credits SOPROBRO...

Softing uaToolkit Embedded security vulnerability

Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communication by Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded versions 1.30 through 1.41.1, which stems from a mishandling of...

smartlink.edu.gr Improper Access Control vulnerability OBB-3835734

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-48192

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...

CVE-2022-48192

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48193

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48192

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...

Code injection

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

Cross site scripting

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...

PT-2023-15611 · Softing · Smartlink Sw-Ht

Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue allows an attacker to execute a dynamic script, such as JavaScript or VBScript, in the context of the application. This is a Cross-site Scripting vulnerability...

CVE-2022-48193 Weak ciphers vulnerability in Softing smartLink SW-HT

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48192: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...

CVE-2022-48193: Inadequate Encryption Strength

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

PT-2023-15612 · Softing · Smartlink Sw-Ht

Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication...

CVE-2022-48192

CVE-2022-48192 is a Cross-site Scripting vulnerability affecting Softing smartLink SW-HT before 1.30. The issue allows an attacker to execute dynamic scripts (JavaScript/VBScript) in the application context. The vulnerability is tied to SW-HT versions prior to 1.30; remediation is to upgrade to 1...

CVE-2022-48193

Summary of CVE-2022-48193 : The issue affects Softing smartLink SW-HT prior to version 1.30, where weak ciphers are enabled during SSL/TLS communication due to the underlying configuration. The impact concerns confidentiality (C: High) with no integrity or availability impact stated in the source...

CVE-2022-48193 Weak ciphers vulnerability in Softing smartLink SW-HT

Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...

CVE-2022-48192 Cross-site scripting vulnerability in Softing smartLink SW-HT

Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script JavaScript, VBScript in the context of the application...