CVE-2022-4954

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

WordPress Waiting: One-click Countdowns Plugin <= 0.6.2 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:plugin:waiting"; if description...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26760 · Unknown · Earthgarden Waiting

Name of the Vulnerable Software and Affected Versions: Earthgarden waiting version 13.6.1 Description: An information leak in Earthgarden waiting allows attackers to obtain the channel access token and send crafted messages. Recommendations: For Earthgarden waiting version 13.6.1, at the moment,...

Line Earthgarden_waiting Security Vulnerability

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line Earthgardenwaiting. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2023-26754 · Unknown · Tonton-Tei Waiting Line

Name of the Vulnerable Software and Affected Versions: TonTon-Tei waiting Line version 13.6.1 Description: An information leak in the software allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to the...

CVE-2023-4000

The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to create and delete countdown...

CVE-2023-3999

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up to, and including, 0.6.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to create and...

Authorization

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up to, and including, 0.6.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to create and...

WordPress plugin Waiting: One-click countdowns 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-27196 · WordPress · The Waiting

Name of the Vulnerable Software and Affected Versions: The Waiting: One-click countdowns plugin for WordPress versions up to, and including, 0.6.2 Description: The issue is related to authorization bypass due to missing capability checks on AJAX calls. This allows authenticated attackers with...

PT-2023-27200 · WordPress · The Waiting

Name of the Vulnerable Software and Affected Versions: The Waiting: One-click countdowns plugin for WordPress versions up to, and including, 0.6.2 Description: The issue is due to missing or incorrect nonce validation on its AJAX actions, making it possible for unauthenticated attackers to create...

WordPress YITH WooCommerce Waiting List Plugin <= 2.13.0 is vulnerable to Broken Access Control

Software YITH WooCommerce Waiting List Type Plugin Vulnerable versions = 2.13.0 Fixed in 2.13.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36506 Patch priority Low CVSS severity Low 5.3 Developer YITH PSID d3cc24363c20 Credits thiennv Required privile...

CVE-2023-21153

In DoAIMSSETCALLWAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from the presence of a missing bounds check in the DoAIMSSETCALLWAITING of the imsservice.cpp file, which may result in an out-of-bounds read...

Classified Ads Script 1.8 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

PT-2023-17946 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the Do AIMS SET CALL WAITING function of imsservice.cpp due to a missing bounds check. This could lead to local escalation of privilege, requiring System...

CVE-2023-2757

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2. This could lead to Cross-Site Scripting due to insufficient input sanitization and output escaping. This...

PT-2023-21213 · WordPress · The Waiting

Name of the Vulnerable Software and Affected Versions: The Waiting: One-click countdowns plugin for WordPress versions up to, and including, 0.6.2 Description: The issue is related to authorization bypass due to a missing capability check on saveLang functions. This could lead to Cross-Site...