Exploit for Insufficiently Protected Credentials in Progress Sitefinity

dpcryptomg !Blackhttps://img.shields.io/badge/code%20sty...

Xen Hypervisor Authorization Bypass

The vulnerability of Xen hypervisors is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

UBUNTU-CVE-2022-3128

The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Webexcels Ecommerce CMS XSS

The vulnerability of the “id” parameter in the “content.php” script of the Webexcels Ecommerce CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Apache Struts XSS

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Zyxel CloudCNM SecuManager security vulnerability

Zyxel CloudCNM SecuManager is a set of network management software from China Hopkins Zyxel. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in Zyxel CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from weak...

Smart eVision security vulnerabilities

Smart eVision Information Technology Smart eVision is a business intelligence platform of China Union Quan Information Technology Smart eVision Information Technology Company. Smart eVision is a business intelligence platform that combines business management rooms, dashboards, reports, and input...

Mozilla: Content-Security-Policy base-uri bypass

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that when injecting an HTML base element; some requests would ignore the CSP's base-uri settings and accept the injected element's base instead...

Backdoor.Win32.Bingle.b MVID-2022-0643 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/eacaa12336f50f1c395663fba92a4d32.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bingle.b Vulnerability: Weak Hardcoded Credentials Description: The malware...

Security Bulletin: WebSphere eXtreme Scale Monitoring Console Web Vulnerabilities (CVE-2013-5390, CVE-2013-5393, CVE-2013-5394)

Abstract Three web security vulnerabilities were identified in the WebSphere eXtreme Scale monitoring console, those being a cross site scripting vulnerability, a log-off processing weakness, and vulnerability to a phishing attack. Content VULNERABILITY DETAILS: CVEID:CVE-2013-5390 DESCRIPTION: A...

PT-2022-22662

Name of the Vulnerable Software and Affected Versions Node.js version 18 Description A weak randomness issue exists in the WebCrypto keygen due to a change with EntropySource in SecretKeyGenTraits::DoKeyGen in src/crypto/crypto keygen.cc. There are two main problems: 1. The return value of...

EMIAS libacl.so.1 Logic Execution

The vulnerability of the “libacl.so.1” library in the “EMIAS” operating system is related to the use of an erroneous operator. Exploiting this vulnerability may allow attackers to execute unintended logic and other unexpected behaviors in the application...

Microsoft Visual Studio Code Remote Code Execution (CVE-2021-27084)

A remote code execution vulnerability exists in the Maven for Java Extension for Microsoft Visual Studio Code. The vulnerability is due to a design weakness. A remote attacker can exploit this vulnerability by enticing a user to open a maliciously crafted Java Maven project folder...

CVE-2022-39000: Undefined Security Weakness

The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup...

CVE-2022-20386: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328...

CVE-2022-20391: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000...

CVE-2022-20388: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323...

CVE-2022-20387: Undefined Security Weakness

Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324...

CVE-2022-35836: Undefined Security Weakness

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2022-1602: Undefined Security Weakness

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 SP8. The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 SP9. HP has released Service Pack 10 SP10 to remediate the potential vulnerability introduced in SP8...