Stop Spam Comments <= 0.2.1.2 - Access Token Bypass

The plugin does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request. Collect the name and value of ssckey for the target post and use it on the request. curl...

Multiple vulnerabilities in Nintendo Wi-Fi Network Adaptor WAP-001

Overview Nintendo Wi-Fi Network Adaptor provided by Nintendo Co.,Ltd. contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2022-36381 Buffer overflow CWE-121 - CVE-2022-36293 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc reported these vulnerabilities to IP...

CVE-2022-29951

JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...

CLSA-2022-1658171278 Fixed 7 CVEs in vim

CVE-2022-2206: adjust cmdlinerow and msgrow to the value of Rows - CVE-2022-2284: stop visual mode when closing a window - CVE-2022-2285: put a NUL after the typeahead - CVE-2022-2286: check the length of the string - CVE-2022-2287: disallow adding a word with control characters or a trailing...

Honeywell Alerton Visual Logic 安全漏洞

The Honeywell Alerton Visual Logic is a communication sensor/controller from USAHoneywell. with a built-in humidity sensor and optional wireless capability. A security vulnerability exists in Honeywell Alerton Visual Logic versions 2022-05-04 and earlier, which can be exploited by an attacker to...

stop-sekta.kz Cross Site Scripting vulnerability OBB-2756462

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Vulnerability of the /admin/service/stop/ component of the TrueConf Server software, which allows a attacker to perform a CSRF attack

The vulnerability of the /admin/service/stop/ component of the TrueConf Server is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

CVE-2017-20120

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

PT-2022-3341

Name of the Vulnerable Software and Affected Versions TrueConf Server version 4.3.7 Description The issue is related to a cross-site request forgery CSRF attack, which can be initiated remotely. It affects the /admin/service/stop/ component of the TrueConf Server software. The exploitation of thi...

CVE-2017-20120: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

PT-2022-31165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential issue exists in the rtllib beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31479

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A potential issue exists in the ieee80211 beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32206

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31942

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A potential issue exists in the rtllib beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31735

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31166

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30810

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A potential issue exists in the ieee80211 beacons stop function, which may cause a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A potential issue exists in the ieee80211 beacons stop function, which may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...