36 matches found
CVE-2023-47438
The Reportico report designer (specifically Reportico Till versions prior to 8.1.0 ) is vulnerable to an SQL Injection vulnerability. The root cause is improper input validation in the project parameter , which allows an attacker to inject malicious SQL queries. Successful exploitation enables an...
CVE-2023-48765
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Till Krüss Email Address Encoder allows Stored XSS.This issue affects Email Address Encoder: from n/a through 1.0.22...
CVE-2023-48765
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Till Krüss Email Address Encoder allows Stored XSS.This issue affects Email Address Encoder: from n/a through 1.0.22...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Till Krüss Email Address Encoder allows Stored XSS.This issue affects Email Address Encoder: from n/a through 1.0.22...
PT-2023-30946
Name of the Vulnerable Software and Affected Versions Till Krüss Email Address Encoder versions n/a through 1.0.22 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...
CVE-2023-48765: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Till Krüss Email Address Encoder allows Stored XSS.This issue affects Email Address Encoder: from n/a through 1.0.22...
Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company. A Swiss hacker who was involved in the intrusion of cloud-based surveillance firm Verkada and exposed...
CVE-2019-17599
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-17599: Improper Neutralization of Input During Web Page Generation
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-17515
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
CVE-2019-17515
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
PT-2019-15180
Name of the Vulnerable Software and Affected Versions cleantalk-spam-protect plugin versions prior to 5.127.4 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. This is possible when the Administrator is logged in and a reflected...
PT-2019-15220
Name of the Vulnerable Software and Affected Versions Quiz And Survey Master plugin versions prior to 6.3.5 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code. This can occur via the from or till parameter, and/or the quiz id parameter, in the...
CVE-2019-17515: Improper Neutralization of Input During Web Page Generation
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...
FreeBSD : cups-filters -- buffer overflow in texttopdf size allocation (b19da422-1e02-11e5-b43d-002590263bf5)
Stefan Cornelius from Red Hat reports : A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execut...