79 matches found
Design/Logic Flaw
The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the get function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin settings. While a nonce check is...
Design/Logic Flaw
The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templatecount function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While ...
CVE-2023-2086
CVE-2023-2086 : The WordPress plugin “Essential Blocks” (Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates) is vulnerable due to a missing capability check on the template_count function in versions up to and including 4.0.6, enabling subscriber-level attackers to view plugin...
CVE-2023-2084
CVE-2023-2084 affects the WordPress Essential Blocks plugin for WordPress, vulnerable up to version 4.0.6. The root cause is a missing capability check in the get function, allowing subscriber-level attackers to read or obtain plugin settings. Although a nonce check exists, it only runs when a no...
CVE-2022-39862
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R11 and 3.3.03.66 in Android S12 allows unauthorized use of javascript interface api...
CVE-2022-39862
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R11 and 3.3.03.66 in Android S12 allows unauthorized use of javascript interface api...
Exploit for Off-by-one Error in F5 Nginx
CVE-2021-23017-PoC pip install -r requirements.txt pytho...
NY Man Pleads Guilty in $20 Million SIM Swap Theft
A 24-year-old New York man who bragged about helping to steal more than $20 million worth of cryptocurrency from a technology executive has pleaded guilty to conspiracy to commit wire fraud. Nicholas Truglia was part of a group alleged to have stolen more than $100 million from cryptocurrency...
Glassdoor: Unauthorized usage of External API Key (Usage of Google Maps API Key ==> $$$
A Google Maps API key was found in the source code of a Glassdoor webpage, which allowed unauthorized usage of the API. The API key was not configured securely...
CVE-2020-7251
Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security ENS Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS...
CVE-2018-14670
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database...
CVE-2018-14670
Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database...
CVE-2018-14670
Summary of CVE-2018-14670 (ClickHouse) : A misconfiguration in the Debian package for ClickHouse prior to version 1.1.54131 could allow unauthorized use of the database. Multiple sources confirm the issue and its remediation: update to version 1.1.54131 or later to resolve the vulnerability. The ...
CVE-2018-7989
Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...
CVE-2018-7989
Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326C00 have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful...
Microsoft Windows: Interactive logon: Machine inactivity limit
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmachineinactivitylimit.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Machine inactivity limit Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Cryptocurrency Mining: Abuse of system resources
Recent advances including digital currencies and the associated public transaction record blockchain have paved the way for an array of new financial activities. Cryptocurrencies like Bitcoin are beginning to be accepted as payment by major retailers, creating more concrete use cases and...
Gitlab deployment keys component improper authorization vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has features similar to Github , you can check out the project's file content , commit history , bug lists , etc. GitLab Community Edition CE ...
Authorization
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users...