CVE-2022-20212

In wifi.RequestToggleWifiActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

Google Android Automotive OS (AAOS) 权限许可和访问控制问题漏洞

Google Android Automotive Os is an operating system and platform from Google, Inc. that runs directly on in-vehicle hardware. an elevation of privilege vulnerability exists in Google Android version 10 11, which originates in the wifi.requestToggleWifiActivity in AndroidManifest.xml...

CVE-2022-28666

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin = 1.7.7 at WordPress leading to &yikes-the-content-toggle; option update...

VulnCheck KEV: CVE-2022-28666

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin = 1.7.7 at WordPress leading to &yikes-the-content-toggle option update...

Malicious code in wafer-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f117b49212c54aa2f555e05a36d1649db491dd4a3e0f22d318cbfa3dfd6cf181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7029 Malicious code in wafer-toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f117b49212c54aa2f555e05a36d1649db491dd4a3e0f22d318cbfa3dfd6cf181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29435

Cross-Site Request Forgery CSRF vulnerability in Alexander Stokmann's Code Snippets Extended plugin = 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets...

Gateway 12.1 55.247- after reboot/restart the Gateway is not working need to Enable/Disabled MBF for get access to the Gateway page

After ADC reboot/restart Customer unable to access Citrix Gateway page. Customer had to toggle MBF mode on ADC for restore access to Citrix Gateway Page...

WordPress Cookii – Free GDPR Cookie Consent plugin <= 3.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Cookii – Free GDPR Cookie Consent plugin versions = 3.0.2. Solution No patched version available...

WordPress Device Frame plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Device Frame plugin versions = 1.0.0. Solution No patched version available...

WordPress Import Social Statistics plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Import Social Statistics plugin versions = 1.0.2. Solution No patched version available...

WordPress Ultimate Post Kit – Addons For Elementor plugin < 2.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Post Kit – Addons For Elementor plugin versions 2.9.1. Solution Update the WordPress Ultimate Post Kit – Addons For Elementor plugin to the latest available version at least 2.9.1...

WordPress Cost Calculator Builder plugin < 2.3.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Cost Calculator Builder plugin versions 2.3.3. Solution Update the WordPress Cost Calculator Builder plugin to the latest available version at least 2.3.3...

WordPress Viralike theme < 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Viralike theme versions 1.0.5. Solution Update the WordPress Viralike theme to the latest available version at least 1.0.5...

WordPress The Events Calendar plugin < 5.14.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress The Events Calendar plugin versions 5.14.0.4. Solution Update the WordPress The Events Calendar plugin to the latest available version at least 5.14.0.4...

WordPress ClinicalWP Core plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress ClinicalWP Core plugin versions = 1.0.5. Solution No patched version available...

WordPress Automatic YouTube Gallery plugin < 1.6.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Automatic YouTube Gallery plugin versions 1.6.5. Solution Update the WordPress Automatic YouTube Gallery plugin to the latest available version at least 1.6.5...

WordPress Sparrow: Product Reviews and Ratings for WooCommerce plugin <= 2.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Sparrow: Product Reviews and Ratings for WooCommerce plugin versions = 2.0.2. Solution No patched version available...

WordPress Alt Manager plugin < 1.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Alt Manager plugin versions 1.5.0. Solution Update the WordPress Alt Manager plugin to the latest available version at least 1.5.0...

WordPress SV Tracking Manager plugin < 1.8.02 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Tracking Manager plugin versions 1.8.02. Solution Update the WordPress SV Tracking Manager plugin to the latest available version at least 1.8.02...