958 matches found
CVE-2022-49834 nilfs2: fix use-after-free bug of ns_writer on remount
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of nswriter on remount If a nilfs2 filesystem is downgraded to read-only due to metadata corruption on disk and is remounted read/write, or if emergency read-only remount is performed, detaching a l...
CVE-2022-49834
CVE-2022-49834 concerns a use-after-free in nilfs2 when downgrading to read-only and remounting read/write, risking access to a freed nilfs_writer. The issue arises during a race between log-writer detachment and remount/downgrade, potentially allowing a Task1 thread to dereference a freed pointe...
CVE-2025-32480
Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...
WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Windows Live Writer versions = 0.1...
CVE-2025-32480
Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...
CVE-2025-32480 WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...
CVE-2025-32480 WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in dalziel Windows Live Writer windows-live-writer allows Stored XSS.This issue affects Windows Live Writer: from n/a through = 0.1...
CVE-2025-32480
CVE-2025-32480 is a CSRF vulnerability in Windows Live Writer that leads to a Stored XSS . Public details in the description indicate the flaw is triggered via cross-site requests and can result in script execution within the context of the affected Windows Live Writer tool (version range stated ...
WordPress plugin Windows Live Writer 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...
PT-2025-15762 · Microsoft · Windows Live Writer
Name of the Vulnerable Software and Affected Versions: Windows Live Writer versions 0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...
CVE-2025-31564
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Blind SQL Injection.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer,...
CVE-2025-31818
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ContentBot.ai ContentBot AI Writer content-bot allows Stored XSS.This issue affects ContentBot AI Writer: from n/a through = 1.2.4...
CVE-2025-31564
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Blind SQL Injection.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer,...
CVE-2025-31564 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Blind SQL Injection.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer,...
CVE-2025-31564 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Blind SQL Injection.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer,...
CVE-2025-31564
CVE-2025-31564 describes an authenticated SQL Injection vulnerability in the Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One plugin. Connected sources confirm the issue affects this WordPress plugin and indicate an SQL injection in the plugin’s handling of inputs. The W...
WordPress ContentBot AI Writer plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin ContentBot AI Writer versions = 1.2.4...
CVE-2025-31818
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ContentBot.ai ContentBot AI Writer content-bot allows Stored XSS.This issue affects ContentBot AI Writer: from n/a through = 1.2.4...
CVE-2025-31818 WordPress ContentBot AI Writer plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ContentBot.ai ContentBot AI Writer content-bot allows Stored XSS.This issue affects ContentBot AI Writer: from n/a through = 1.2.4...
CVE-2025-31818
CVE-2025-31818 affects ContentBot AI Writer (WordPress plugin) with Stored XSS in ContentBot AI Writer input during web page generation. Affected versions: up to 1.2.4 (n/a through 1.2.4). The CVSSv3.1 base score is 6.5 (Medium); attack vector NETWORK, authentication LOW, user interaction REQUIRE...