2829 matches found
CVE-2022-41950
The CVE affects the super-xray GUI for the vulnerability scanner xray. In 0.2-beta, a privilege escalation vulnerability resulted in inaccurate default permissions on Linux and macOS. Remediation is upgrading to super-xray 0.3-beta; no exploit details or in‑the‑wild data are provided in the suppl...
PT-2022-26179 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: super-xray versions 0.2-beta Description: A privilege escalation issue was discovered in super-xray, which is the GUI alternative for the vulnerability scanning tool xray. This issue resulted in inaccurate default xray permissions. The proble...
CVE-2022-41950 Privilege Escalation Vulnerability by wrong chmod param
super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...
Super Xray 安全漏洞
Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A security vulnerability exists in Super Xray version 0.2-beta Linux and Mac OS systems, which can be exploited by attackers to elevate privileges...
CVE-2022-41950 Privilege Escalation Vulnerability by wrong chmod param
super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...
CVE-2022-41945 Remote Code Execution (RCE) vulnerability in super-xray via URL input
super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...
Super Xray 安全漏洞
Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A security vulnerability exists in Super Xray version 0.1-beta, which stems from the fact that its URLs are not filtered and directly spliced, leading to a possible RCE vulnerability...
PT-2022-26175 · Unknown · Super-Xray
Name of the Vulnerable Software and Affected Versions: super-xray version 0.1-beta Description: The issue is related to a vulnerability scanner GUI launcher. In the affected version, the URL is not filtered and is directly spliced into the command, resulting in a possible Remote Code Execution RC...
CVE-2022-41945
CVE-2022-41945 affects the super-xray vulnerability scanner frontend. Concrete details in connected sources show that in version 0.1-beta, the URL input is directly spliced into a command without proper filtering, leading to a possible remote code execution (RCE). Impact is described as total, wi...
CVE-2022-41945 Remote Code Execution (RCE) vulnerability in super-xray via URL input
super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...
CVE-2022-41945 Remote Code Execution (RCE) vulnerability in super-xray via URL input
super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...
WordPress Super Testimonial Pro premium plugin < 1.0.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Auth. Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress Super Testimonial Pro premium plugin versions 1.0.8. Solution Update the WordPress Super Testimonial Pro plugin to the latest available version at least 1.0.8...
GSD-2022-1006738 btrfs: scrub: properly report super block errors in system log
btrfs: scrub: properly report super block errors in system log This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
CVE-2022-3539
The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-34993 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the btrfs scrub feature, which fails to properly report super block errors in the system log. This could potentially lead to security vulnerabilities, although the actual...
PT-2022-22793
Name of the Vulnerable Software and Affected Versions Testimonials WordPress plugin versions prior to 2.7 super-testimonial-pro WordPress plugin versions prior to 1.0.8 Description The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks, even when the...
CVE-2022-3539
The CVE-2022-3539 issue affects the WordPress plugins Testimonials (before 2.7) and Super Testimonial Pro (before 1.0.8). The root cause is a lack of sanitization and escaping of plugin settings, enabling high-privilege users (e.g., admins) to perform cross-site scripting (XSS) even when the unfi...
Lin CMS vulnerable to Improper Authentication
An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...