Siemens SCALANCE

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

KLA12602 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of...

CVE-2022-2340

The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2340

The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

Cross site scripting

The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2340

CVE-2022-2340 — Affected: W-DALIL WordPress plugin (≤ 2.0). Description: non-sanitized/escaped fields allow Stored XSS when unfiltered_html is disallowed (e.g., multisite). Impact: potential for script execution by high-privilege authenticated users (admin). CVSS 3.1 base score 4.8 (Medium) with ...

CVE-2022-2340 W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting

The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress plugin W-DALIL 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

SUSE: Security Advisory (SUSE-SU-2022:2281-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress W-DALIL plugin <= 2.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Mariam Tariq HunterSherlock in WordPress W-DALIL plugin versions = 2.0. Solution No patched version available...

WordPress W-DALIL 2.0 Cross Site Scripting

Exploit Title: WordPress Plugin W-DALIL - Stored Cross Site Scripting Date: 27-06-2022 Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/w-dalil/ Version: 2.0 Tested on: Firefox Contact me: [email protected] Vulnerable Code: " value="" / Steps To...

W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup PoC Add/edit a Dali Item and put the following payload in...

WordPress W-DALIL 2.0 Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin W-DALIL - Stored Cross Site Scripting Exploit Author: Mariam Tariq - HunterSherlock Vendor Homepage: https://wordpress.org/plugins/w-dalil/ Version: 2.0 Tested on: Firefox Contact me: email protected Vulnerable Code: " value="" / Steps To Reproduce : 1 - First...

W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Add/edit a Dali Item and put the following payload in one...

CreateProcessW (>=0.1.0 <=0.1.2), UWUWUW (>=0.13.2 <=0.13.4) +186 more potentially affected by unknown CVE via windows (>=0.20.1 <=0.30.0)

windows CARGO version =0.20.1, =0.1.0, =0.13.2, =0.1.0, =1.0.0, =1.0.0, =1.8.0, =0.0.6, =0.0.4, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.1 - btleplug =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X4MQ-M75F-MX8M...

WordPress Qubely plugin <= 1.8.0 - Authenticated Arbitrary Settings Update vulnerability

Authenticated Arbitrary Settings Update vulnerability discovered by Jan w Oleju in WordPress Qubely plugin versions = 1.8.0 Solution Update the WordPress Qubely – Advanced Gutenberg Blocks plugin to the latest available version at least 1.8.1...

DuckDuckGo Isn’t as Private as You Think

Plus: A $150 million Twitter fine, a massive leak from a Chinese prison in Xinjiang, and an ISIS plot to assassinate George W. Bush...

Google Chrome 78.0.3904.70 - Remote Code Execution Exploit

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

Siemens SCALANCE W-1700 (11ac) Series Denial of Service Vulnerability (CNVD-2022-28499)

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series, which can be exploited by an attacker to cause the entire device to crash for competing conditions...

Siemens SCALANCE W-1700 (11ac) Series Denial of Service Vulnerability (CNVD-2022-28498)

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series that could be exploited by an attacker to cause a denial of service condition affecting only the port...