[SECURITY] Fedora 40 Update: ws-commons-util-1.0.2-24.fc40

This is version 1.0.2 of the common utilities from the Apache Web Services Project...

[SECURITY] Fedora 40 Update: jaxb-istack-commons-4.2.0-8.fc40

Code shared between JAXP, JAXB, SAAJ, and JAX-WS projects...

CVE-2022-34269

An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/loaddtd?systemid= blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interface, leading to command execution...

AZL-44619 CVE-2024-24476 affecting package wireshark for versions less than 4.4.7-1

A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addrresolv.c, and wsmanuflookupstr, size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected...

Progress Software WS_FTP Server Security Vulnerability

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, USA. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.5 that stems from the presence of a cross-site scripting vulnerability...

Mitsubishi Electric MELSEC WS Series Ethernet Interface Module Authentication Bypass By Capture-Replay (CVE-2023-6374)

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

Authentication flaw

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

CVE-2023-6374

The CVE-2023-6374 vulnerability affects Mitsubishi Electric MELSEC WS Series Ethernet Interface Module WS0-GETH00200 (all serial numbers). A remote unauthenticated attacker can bypass authentication via a capture-replay attack, enabling unauthorized login to the module and the potential disclosur...

Mitsubishi Electric MELSEC WS Series Ethernet Interface Module

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Mitsubishi Electric Equipment : MELSEC WS Series Vulnerability : Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized attacker to...

Mitsubishi Electric MELSEC WS Series Security Vulnerability

The Mitsubishi Electric MELSEC WS Series is a programmable logic controller from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric MELSEC WS Series WS0-GETH00200. An attacker could use this vulnerability to bypass authentication and disclose or tamper with programs...

Dell iDRAC9 Authentication Bypass (CVE-2019-3707)

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface. This plugin only works...

yalnizmp3.ws Cross Site Scripting vulnerability OBB-3833349

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52135

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from n/a through 1.9.170...

CVE-2023-52135 WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from n/a through 1.9.170...

CVE-2023-52135

The CVE-2023-52135 vulnerability affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress. It is an SQL Injection (Improper Neutralization of Special Elements used in an SQL Command) affecting WS Form LITE for WordPress versions up to 1.9.170. According to connected sources, exploita...

PT-2023-31928 · WordPress · Ws Form Lite

Name of the Vulnerable Software and Affected Versions: WS Form LITE – Drag & Drop Contact Form Builder for WordPress versions 1.9.170 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

WordPress Plugin WS Form LITE SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WS Form LI...

WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection

Software WS Form LITE Type Plugin Vulnerable versions = 1.9.170 Fixed in 1.9.171 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52135 Patch priority Low CVSS severity Low 7.6 Developer WS Form PSID c63b8c8c0314 Credits Muhammad Daffa Required privilege Administrator Publishe...