Vulnerabilidades

El plugin Mailgun Subscriptions para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del shortcode 'mailgun_subscription_form' del plugin en todas las versiones hasta la 1.3.1, inclusive, debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el…

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Vulnerabilidad de autorización faltante en scriptsbundle AdForest adforest permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a AdForest: desde n/a hasta menor o igual que 6.0.11.

The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that…

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Prior to 1.24.0, The Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication with…

Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has sendDefaultPii: true it is possible to inadvertently send certain sensitive HTTP headers, including the Cookie header, to Sentry. Those headers would be stored within…

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create fake payment entries…

Missing Authorization vulnerability in Scott Paterson Subscriptions & Memberships for PayPal subscriptions-memberships-for-paypal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscriptions & Memberships for PayPal: from n/a through <= 1.1.7.

El paquete npm 'expr-eval' es vulnerable a la Contaminación de Prototipos. Un atacante con acceso a la interfaz de evaluación de expresiones puede usar el modelo de herencia basado en prototipos de JavaScript para lograr la ejecución de código arbitrario. El paquete npm 'expr-eval-fork' resuelve este problema.

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code.

The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that…

El plugin Insert Headers and Footers Code - HT Script para WordPress es vulnerable a cross-site scripting almacenado mediante la adición de scripts en todas las versiones hasta la 1.1.6, inclusive, debido a controles de capacidad insuficientes. Esto permite a atacantes autenticados, con acceso de nivel Autor y…

El plugin Easy Email Subscription para WordPress es vulnerable a la falsificación de petición en sitios cruzados en todas las versiones hasta la 1.3, inclusive. Esto se debe a la validación de nonce faltante o incorrecta en la función show_editsub_page(). Esto hace posible que atacantes no autenticados eliminen…

El plugin Easy Email Subscription para WordPress es vulnerable a inyección SQL a través del parámetro 'uid' en todas las versiones hasta la 1.3, inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y la falta de preparación suficiente en la consulta SQL existente. Esto hace posible…

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation check on the PMS_AJAX_Checkout_Handler::process_payment() function in all versions up to, and…

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and…

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability.

The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above,…

AdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be manipulated by…

Vulnerabilidad de autorización faltante en Joby Joseph SEO Meta Description Updater seo-meta-description-updater permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a SEO Meta Description Updater: desde n/a hasta menor o igual que 1.2.0.

Neutralización Inadecuada de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Nks Email Subscription Popup email-subscribe permite XSS Almacenado. Este problema afecta a Email Subscription Popup: desde n/a hasta menor o igual que 1.2.26.

Vulnerabilidad de deserialización de datos no confiables en designthemes Insurance insurance permite la inyección de objetos. Este problema afecta a Insurance: desde n/a hasta menor o igual que 3.5.

Vulnerabilidad en el producto Oracle Scripting de Oracle E-Business Suite (componente: Misceláneo). Versiones compatibles que están afectadas son 12.2.3-12.2.14. Vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red vía HTTP comprometer Oracle Scripting. Ataques exitosos requieren…

The Async JavaScript plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.19.07.14. This is due to missing authorization checks on the aj_steps AJAX aciton along with a lack on sanitization on the settings saved via the function. This makes it possible for authenticated…