Results
39,956· Page 268/800A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-
A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical. This issue affects the upgr
WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via msp_info_htm.
Cross Site Scripting (XSS) vulnerability through the action parameter in index.php. Affected product codebase https://g
The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privi
The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OF
Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Us
The Attributes for Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘attributesForBlocks
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versio
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data
The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Count
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthentica
The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQ
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some o
The Secure Copy Content Protection and Content Locking WordPress plugin before 4.1.7 does not sanitise and escape some o
The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and e
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to
Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary c
Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victi
Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR.
Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary
Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.
Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to
Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to a
Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files
Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in M
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privilege
Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attack
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers t
Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access
Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local per
Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged
Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to
Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attacker
Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access se
Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers t
Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypa
Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to del
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release
Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may a
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to
Test your stack for 2024issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.