Results
19,870 of 39,956· Page 132/398Fides is an open-source privacy engineering platform. Prior to version 2.44.0, a timing-based username enumeration vulne
ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does
Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information v
A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown
A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semtek Informatics
A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at
Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information v
A vulnerability was found in Linksys WRT54G 4.21.5. It has been rated as critical. Affected by this issue is the functio
WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via msp_info_htm.
Cross Site Scripting (XSS) vulnerability through the action parameter in index.php. Affected product codebase https://g
The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable
The Attributes for Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘attributesForBlocks
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in
The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Count
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthentica
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some o
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some o
The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and e
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to
Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.
Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to
Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to a
Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files
Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in M
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privilege
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers t
Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access
Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local per
Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged
Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to
Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attacker
Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access se
Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers t
Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to del
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release
Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may a
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vuln
Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this
Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may af
Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnera
Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this v
Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may
Test your stack for 2024issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.