NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File Disclosure

NetSupport Software Manager

Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'

ays-pro Fox LMS – WordPress LMS Plugin

OneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings Update

onesignal OneSignal – Web Push Notifications

FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode

techjewel FluentAuth – The Ultimate Authorization & Security Plugin for WordPress

Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check

wpdevelop Booking Calendar

FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering

ninjateam FileBird – WordPress Media Library Folders & File Manager

RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode

metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification

wpchill Image Gallery – Photo Grid & Video Gallery

User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

wpeverest User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin

CC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode

caterhamcomputing CC Child Pages

Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI

Apache Software Foundation Apache Airflow apache airflow

NTLM Hash Exposure Vulnerability

Zohocorp ManageEngine ADManager Plus zohocorp manageengine_admanager_plus +1个

Elasticsearch Improper Authentication

Elastic Elasticsearch elastic elasticsearch

LibreOffice 安全漏洞

The Document Foundation LibreOffice

Kibana Cross-site Scripting via the Integration Package Upload Functionality

Elastic Kibana elastic kibana

FantasticLBP Hotels Server hotelList.php sql injection

FantasticLBP Hotels Server

FantasticLBP Hotels Server OrderList.php sql injection

FantasticLBP Hotels Server

Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow

Shiguangwu sgwbox N3 sgwbox n3_firmware

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation ...

LINE Corporation LINE client for iOS linecorp line

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certifica...

LINE Corporation LINE client for iOS linecorp line