CVE-2022-4484 Super Socializer < 7.13.44 - Contributor+ Stored XSS

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

WordPress WP Super Popup Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Super Popup Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47598 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f0d75ac88219 Credits Mika Required privilege...

CVE-2022-45857

An incorrect user management vulnerability CWE-286 in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the superadmin account is deleted...

PT-2023-14784 · Fortinet · Fortigate +1

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.4.6 and below Description: The issue is related to an incorrect user management vulnerability in the VDOM creation component. This may allow an attacker to access a FortiGate without a password via newly created VDOMs...

CVE-2022-45778

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 = 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a...

Design/Logic Flaw

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 = 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a...

CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...

Buffer overflow

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...

多款Nintendo产品安全漏洞

Nintendo Mario Kart and others are products of the Japanese company Nintendo.Nintendo Mario Kart is a game.Nintendo Splatoon is a third-person shooter game series.Nintendo Switch Sports is a sports video game. Nintendo Mario Kart,Nintendo Splatoon,Nintendo Switch Sports,Nintendo Super Mario Maker...

CVE-2022-47949

Summary of CVE-2022-47949 (ENLBufferPwn) : The vulnerability stems from the Nintendo NetworkBuffer class used by Animal Crossing: New Horizons and other Nintendo titles. The two methods, Set and Add, do not validate that incoming data fits the allocated buffer (dataSize), enabling a remote attack...

CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...

CVE-2022-44849

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

CVE-2022-44849

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

MetInfo 跨站请求伪造漏洞

Metinfo MetInfo is a content management system CMS developed by China's Mito Metinfo using PHP and Mysql. A security vulnerability exists in MetInfo v7.7, which stems from an Administrator List vulnerability that allows an attacker to arbitrarily add a super administrator account via a cross-site...

PT-2022-27324 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: MetInfo version 7.7 Description: A Cross-Site Request Forgery CSRF issue in the Administrator List allows attackers to arbitrarily add a Super Administrator account. This enables unauthorized access and control over the system. Recommendation...

CVE-2022-44849

A Cross-Site Request Forgery CSRF in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator account...

SQL Injection Vulnerability in Beijing Century Super Star Information Technology Development Co.

Beijing Century Super Star Information Technology Development Co., Ltd. is an education informatization enterprise driven by technology, product and service innovation. Beijing Century Super Star Information Technology Development Limited Liability Company Super Star Huiya Electronic Library...

Cross-Site Request Forgery (CSRF)

thinkcmf/thinkcmf is vulnerable to cross-site request forgery. The vulnerability exists because it is possible to inject a Super Administrator user into administrative users, which allows an attacker to take control of the site via credential injection...

GHSA-6XW3-CPQJ-8MXR ThinkCMF Cross Site Request Forgery (CSRF) vulnerability

ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery CSRF vulnerability that allows a Super Administrator user to be injected into administrative users...