🚨 CVE-2022-0378
Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
🎖@cveNotify
Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.
🎖@cveNotify
GitHub
fix xss on module api call in value parameters · microweber/microweber@fc7e1a0
Drag and Drop Website Builder and CMS with E-commerce - fix xss on module api call in value parameters · microweber/microweber@fc7e1a0
🚨 CVE-2021-46117
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
🎖@cveNotify
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
🎖@cveNotify
J. PRESS
J. PRESS | Men's Suits, Sport Coats, Trousers, Dress Shirts, Ties....
J. Press is synonymous with the very best of American style. Founded at Yale in 1902, J. Press is widely credited with creating "the Ivy League look" and, to this day, represents the top echelon in American tailoring and casual clothing.
🚨 CVE-2021-44692
BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. JohnDoe@example.com would become /members/johndoeexample-com and Jo.test@example.com would become /members/jo-testexample-com. The members list is available to everyone and (in a default configuration) often without authentication. It is therefore trivial to collect a list of email addresses.
🎖@cveNotify
BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. JohnDoe@example.com would become /members/johndoeexample-com and Jo.test@example.com would become /members/jo-testexample-com. The members list is available to everyone and (in a default configuration) often without authentication. It is therefore trivial to collect a list of email addresses.
🎖@cveNotify
Cygenta-2020
Notes from a Pentester: How we found 2 new BuddyBoss vulnerabilities
Read how we discovered two Wordpress plugin vulnerabilities: CVE-2021-43334 and CVE-2021-44692.
🚨 CVE-2021-43334
BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.
🎖@cveNotify
BuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.
🎖@cveNotify
Cygenta-2020
Notes from a Pentester: How we found 2 new BuddyBoss vulnerabilities
Read how we discovered two Wordpress plugin vulnerabilities: CVE-2021-43334 and CVE-2021-44692.
🚨 CVE-2021-45975
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
🎖@cveNotify
In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.
🎖@cveNotify
🚨 CVE-2021-46141
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
🎖@cveNotify
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
🎖@cveNotify
GitHub
[CVE-2021-46141] .hostText memory is not properly duped/freed in uriNormalizeSyntax*, uriMakeOwner*, uriFreeUriMembers* for some…
A bug was found within the uriparser. Though it might not be an intended use of the relevant API, the bug can still produce critical issues within a program using uriparser. It would be best if the...
🚨 CVE-2021-45334
Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection
🎖@cveNotify
Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection
🎖@cveNotify
Packetstormsecurity
Online Thesis Archiving System 1.0 SQL Injection / Cross Site Scripting ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🚨 CVE-2022-22852
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_list.
🎖@cveNotify
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in room_list.
🎖@cveNotify
GitHub
CVE-2022-22852/CVE-2022-22852.md at main · Sant268/CVE-2022-22852
Contribute to Sant268/CVE-2022-22852 development by creating an account on GitHub.
🚨 CVE-2022-21686
PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.
🎖@cveNotify
PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.
🎖@cveNotify
GitHub
Release PrestaShop 1.7.8.3 · PrestaShop/PrestaShop
This release fixes 25 bugs and regressions and 1 security fix reported on version 1.7.8.2.
Security issue fixed
#GHSA-mrq4-7ch7-2465: Server Side Twig Template Injection
Full Changelog
Click her...
Security issue fixed
#GHSA-mrq4-7ch7-2465: Server Side Twig Template Injection
Full Changelog
Click her...
🚨 CVE-2021-46336
There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.
🎖@cveNotify
There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.
🎖@cveNotify
GitHub
Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at jerryscript/jerry-core/parser/js/js-parser-expr.c(parser_parse_…
JerryScript revision Commit: a6ab5e9 Version: v3.0.0 Build platform Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64) Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps pyth...
🚨 CVE-2021-46329
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
🎖@cveNotify
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
🎖@cveNotify
GitHub
SEGV (/usr/local/bin/xst+0xdfee5f) in _fini · Issue #768 · Moddable-OpenSource/moddable
Moddable-XS revision Commit: 2f93df29 Version: 11.5.0 32 4 Build environment Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps cd ~/moddable/xs/makefiles/lin make -f xst.mk Test case p...
🚨 CVE-2021-33966
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.
🎖@cveNotify
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.
🎖@cveNotify
Packetstormsecurity
Spotweb-Develop 1.4.9 Cross Site Scripting ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🚨 CVE-2022-22888
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.
🎖@cveNotify
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.
🎖@cveNotify
GitHub
Stack-overflow in ecma-objects (ecma_op_object_find_own) · Issue #4848 · jerryscript-project/jerryscript
JerryScript revision 4592143 Build platform Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64) Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps ./tools/build.py --clean --d...
🚨 CVE-2022-22890
There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0.
🎖@cveNotify
There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0.
🎖@cveNotify
GitHub
Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' in js-scanner-util…
JerryScript revision 4592143 Build platform Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64) Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps ./tools/build.py --clean --d...
🚨 CVE-2021-44593
Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.
🎖@cveNotify
Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.
🎖@cveNotify
SourceCodester
Simple College Website using HTML/PHP/MySQLi with Source Code
Project: Simple College Website using HTML/PHP/MySQLi with Source Code
🚨 CVE-2021-40247
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
🎖@cveNotify
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field.
🎖@cveNotify
SourceCodester
Budget and Expense Tracker System in PHP Free Source Code
Introduction This is a PHP Project entitled Budget and Expense Tracker System. This system is a web-based application that manages your personal/small business budget and expenses. With this, you can easily track the entries budget and expenses by category.…
🚨 CVE-2022-22891
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c.
🎖@cveNotify
Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c.
🎖@cveNotify
GitHub
SEGV in ecma_ref_object_inline of ecma-gc.c · Issue #4871 · jerryscript-project/jerryscript
JerryScript revision Commit: 51da1551 Version: v3.0.0 Build platform Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps ./tools/build.py --clean --debug --profile=es2015-subset --compil...
🚨 CVE-2022-22892
There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_bigint (value) || ecma_is_value_symbol (value) || ecma_is_value_object (value)' failed at jerry-core/ecma/base/ecma-helpers-value.c in Jerryscripts 3.0.0.
🎖@cveNotify
There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_bigint (value) || ecma_is_value_symbol (value) || ecma_is_value_object (value)' failed at jerry-core/ecma/base/ecma-helpers-value.c in Jerryscripts 3.0.0.
🎖@cveNotify
GitHub
Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number…
JerryScript revision Commit: 51da1551 Version: v3.0.0 Build platform Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps ./tools/build.py --clean --debug --profile=es2015-subset --compil...
🚨 CVE-2022-22893
Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.
🎖@cveNotify
Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.
🎖@cveNotify
GitHub
Stack-overflow in vm_loop.lto_priv.304 of vm.c · Issue #4901 · jerryscript-project/jerryscript
JerryScript revision Commit: 42523bd6 Version: v3.0.0 Build platform Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps python ./tools/build.py --clean --debug --compile-flag=-fsanitize...
🚨 CVE-2022-22894
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.
🎖@cveNotify
Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.
🎖@cveNotify
GitHub
Stack-overflow in ecma_lcache_lookup (ecma-lcache.c) · Issue #4890 · jerryscript-project/jerryscript
JerryScript revision Commit: 51da1551 Version: v3.0.0 Build platform Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64) Build steps ./tools/build.py --clean --debug --compile-flag=-fsanitize=addres...
🚨 CVE-2022-22895
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.
🎖@cveNotify
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.
🎖@cveNotify
GitHub
Fix buffer overflow in string radix conversion by rerobika · Pull Request #4850 · jerryscript-project/jerryscript
JerryScript-DCO-1.0-Signed-off-by: Robert Fancsik robert.fancsik@h-lab.eu