485 matches found
CVE-2022-2815
creationtimestamp| type| source ---|---|--- 2023-01-14 16:37:05+00:00| seen| https://t.me/cibsecurity/56508...
CVE-2022-4050
The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...
WordPress plugin Welcart e-Commerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2022-41910
TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...
CVE-2022-3328
creationtimestamp| type| source ---|---|--- 2022-12-01 00:36:51+00:00| seen| https://t.me/ctinow/78566 2022-12-01 08:23:49+00:00| seen| https://t.me/crackcodes/1578 2022-12-01 23:28:44+00:00| published-proof-of-concept| Telegram/e7mpXn8-zCwJ1LtoziMjcjRzRmSH8ETqIOnXcFKQsQUk0R4 2022-12-02...
PT-2022-7267 · Atlassian · Bamboo Server +1
Name of the Vulnerable Software and Affected Versions: codeplex-codehaus affected versions not specified Bamboo Data Center and Server versions 9.2.1 through 9.2.7 Description: A flaw was found in codeplex-codehaus, allowing a directory traversal attack to access files and directories stored...
CVE-2022-28721
creationtimestamp| type| source ---|---|--- 2022-09-26 18:36:34+00:00| seen| https://t.me/cibsecurity/50493...
mysql: Server: FTS unspecified vulnerability (CPU Apr 2022)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2022-2901
Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8...
CVE-2022-2876
creationtimestamp| type| source ---|---|--- 2022-08-18 12:41:13+00:00| seen| https://t.me/cibsecurity/48329...
CVE-2022-2870
creationtimestamp| type| source ---|---|--- 2022-08-17 22:40:30+00:00| seen| https://t.me/cibsecurity/48297...
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from a SQL injection vulnerability in the /mdiy/model/delete URI containing a SQL injection via models Lists...
MingSoft MCMS SQL注入漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingSoft. A SQL injection vulnerability exists in MingSoft MCMS version 5.2.8, which originates from an attacker being able to exploit the fieldName parameter of its /mdiy/page/verify URI component to achieve SQL injection...
CVE-2022-2824
creationtimestamp| type| source ---|---|--- 2022-08-15 20:47:23+00:00| seen| https://t.me/cibsecurity/48165...
CVE-2022-2378
The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
WordPress plugin Easy Student Results 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2022-2804
creationtimestamp| type| source ---|---|--- 2022-08-13 00:34:05+00:00| seen| https://t.me/cibsecurity/48123...
Joplin 跨站脚本漏洞
Joplin is an open source notes and to-do list application. A security vulnerability exists in Joplin version v2.8.8, which stems from the fact that an attacker can execute arbitrary commands by injecting a crafted payload into a Node header...