CVE-2021-33496

Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...

Dutchcoders transfer.sh 跨站脚本漏洞

transfer.sh is a sh script for Dutchcoders to create shared files. Easily and quickly share files via the command line. This code contains everything needed for the server as well as creating your own instance. Dutchcoders transfer.sh 1.2.4 previously had a security vulnerability that stemmed fro...

PT-2021-20158 · Dutchcoders · Transfer.Sh

Name of the Vulnerable Software and Affected Versions: Dutchcoders transfer.sh versions prior to 1.2.4 Description: The issue allows cross-site scripting XSS via an inline view. This means an attacker could potentially inject malicious scripts into the website, affecting users who access the...

WordPress Access Control Error Vulnerability (CNVD-2021-44310)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An Access Control Error vulnerability exists in Realteo WordPress plugin versions prior to 1.2.4,...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Realteo prior to version 1.2.4, whic...

WordPress plugin WP Page Builder 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WP Pag...

Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The plugin, used by the Findeo Theme, did not properly sanitise the keywordsearch, searchradius. bedrooms and bathrooms GET parameters before outputting them in its properties page, leading to an unauthenticated reflected Cross-Site Scripting issue. PoC...

WordPress Realteo premium plugin <= 1.2.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Realteo premium plugin versions = 1.2.3. Solution Update the WordPress Realteo premium plugin to the latest available version at least 1.2.4...

phpLDAPadmin < 1.2.5 Multiple XSS Vulnerabilities - Linux

phpLDAPadmin is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager Access Control Error Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. A security vulnerability exists in Synology Router Manager prior to version 1.2.4-8081, which stems from improper access control, and can be exploited by an attacker to...

Synology Router Manager Access Control Error Vulnerability (CNVD-2020-60456)

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An access control error vulnerability exists in Synology Router Manager SRM versions prior to 1.2.4-8081, which stems from an improper access control vulnerability in lbd...

Nim Remote Command Execution Vulnerability

NIM Network Installation management is a functional module of the AIX operating system that provides an effective and fast method for the installation of the operating system and the maintenance of the software through the network. A security vulnerability exists in Nim version 1.2.4, which stems...

S.Siedle & Soehne SG 150-0 Smart Gateway Code Execution Vulnerability

S.Siedle & Soehne SG 150-0 Smart Gateway is a home smart gateway product from S.Siedle & Soehne, Germany. A security vulnerability exists in the S.Siedle & Soehne SG 150-0 Smart Gateway prior to version 1.2.4. The vulnerability can be exploited by an attacker to execute code via the backup functi...

S. Siedle & Soehne SG 150-0 Smart Gateway Competitive Conditions Issue Vulnerability

S.Siedle & Soehne SG 150-0 Smart Gateway is a home smart gateway product from S.Siedle & Soehne, Germany. A security vulnerability exists in the S.Siedle & Soehne SG 150-0 Smart Gateway versions prior to 1.2.4. The vulnerability can be exploited by an attacker to gain root access to the gateway...

Improper access control

X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improper access to MongoDB instances. Customers who do not use X.509 authentication, and those who do not use the Operator to generate their X.509 certificates ar...

Sql injection

BabyGekko before 1.2.4 has SQL injection...

WordPress Search Exclude plugin <= 1.2.2 - Arbitrary Settings Change vulnerability

Arbitrary Settings Change vulnerability found by Jerome Bruandet in WordPress Search Exclude plugin versions = 1.2.2. Solution Update the WordPress Search Exclude plugin to the latest available version at least 1.2.4...

WordPress Simple 301 Redirects Plugin < 1.25 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

WordPress simple-301-redirects-addon-bulk-uploader plugin unauthorized operation vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. simple-301-redirects-addon-bulk-uploader is used in one of the Simple 301 Redirects redirect plugin to provide extended...

Carel pCOWeb Cross-Site Scripting Vulnerability

Carel pCOWeb is a programmable control card. A cross-site scripting vulnerability exists in Carel pCOWeb versions prior to B1.2.4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side...