RedPacket Security - InfoSec News & Tutorials

Email Encoder Bundle Plugin for WordPress cross-site scripting | CVE-2023-47821

November 28, 2023

NAME__________Email Encoder Bundle Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Email Encoder Bundle Plugin for WordPress 2.1.8Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Email Encoder...

Warptech Industries Warpgate privilege escalation | CVE-2023-48712

November 28, 2023

NAME__________Warptech Industries Warpgate privilege escalationPlatforms Affected:Warptech Industries Warpgate 0.8.1Risk Level:7.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Warptech Industries Warpgate could allow a remote authenticated attacker...

LOYTEC electronics GmbH L-INX Automation Servers information disclosure | CVE-2023-46388

November 28, 2023

NAME__________LOYTEC electronics GmbH L-INX Automation Servers information disclosurePlatforms Affected:LOYTEC electronics GmbH LINX-212 6.2.4 LOYTEC electronics GmbH LINX-151 7.2.4Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information...

Quiz And Survey Master Plugin for WordPress cross-site scripting | CVE-2023-47834

November 28, 2023

NAME__________Quiz And Survey Master Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Quiz And Survey Master Plugin for WordPress 8.1.13Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting...

LOYTEC electronics LINX Configurator information disclosure | CVE-2023-46384

November 28, 2023

NAME__________LOYTEC electronics LINX Configurator information disclosurePlatforms Affected:LOYTEC electronics GmbH LINX Configurator 7.4.10Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________LOYTEC electronics LINX Configurator could allow...

LOYTEC electronics LINX Configurator information disclosure | CVE-2023-46385

November 28, 2023

NAME__________LOYTEC electronics LINX Configurator information disclosurePlatforms Affected:LOYTEC electronics GmbH LINX Configurator 7.4.10Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________LOYTEC electronics LINX Configurator could allow...

WordPress Theater Plugin for WordPress cross-site scripting | CVE-2023-47833

November 28, 2023

NAME__________WordPress Theater Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Quiz And Survey Master Plugin for WordPress 8.1.13Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________WordPress Theater...

DrawIt Plugin for WordPress cross-site scripting | CVE-2023-47831

November 28, 2023

NAME__________DrawIt Plugin for WordPress cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________DrawIt Plugin for WordPress is vulnerable to cross-site scripting, caused by...

ARI Stream Quiz Plugin for WordPress cross-site scripting | CVE-2023-47835

November 28, 2023

NAME__________ARI Stream Quiz Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress ARI Soft ARI Stream Quiz Plugin for WordPress 1.2.32Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting...

LOYTEC electronics LINX Configurator information disclosure | CVE-2023-46383

November 28, 2023

LOYTEC electronics GmbH L-INX Automation Servers information disclosure | CVE-2023-46386

November 28, 2023

LOYTEC electronics GmbH L-INX Automation Servers information disclosure | CVE-2023-46387

November 28, 2023

NAME__________LOYTEC electronics GmbH L-INX Automation Servers information disclosurePlatforms Affected:LOYTEC electronics GmbH LINX-212 6.2.4 LOYTEC electronics GmbH LINX-151 7.2.4Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information...

LOYTEC electronics GmbH L-INX Automation Servers information disclosure | CVE-2023-46389

November 28, 2023

OpenZFS security bypass | CVE-2023-49298

November 28, 2023

NAME__________OpenZFS security bypassPlatforms Affected:OpenZFS OpenZFS 2.1.13 OpenZFS OpenZFS 2.2.1Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________OpenZFS could allow a remote attacker to bypass security...

Apache DolphinScheduler information disclosure | CVE-2023-49068

November 28, 2023

NAME__________Apache DolphinScheduler information disclosurePlatforms Affected:Apache DolphinScheduler 3.2.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache DolphinScheduler could allow a remote attacker to obtain sensitive information,...

Seattle Lab Software Slmail directory traversal | CVE-2023-4595

November 28, 2023

NAME__________Seattle Lab Software Slmail directory traversalPlatforms Affected:Seattle Lab Software Slmail 5.5.0.4433Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Seattle Lab Software Slmail could allow a...

Seattle Lab Software Slmail directory traversal | CVE-2023-4593

November 28, 2023

NAME__________Seattle Lab Software Slmail directory traversalPlatforms Affected:Seattle Lab Software Slmail 5.5.0.4433Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Seattle Lab Software Slmail could allow a...

Seattle Lab Software Slmail cross-site scripting | CVE-2023-4594

November 28, 2023

NAME__________Seattle Lab Software Slmail cross-site scriptingPlatforms Affected:Seattle Lab Software Slmail 5.5.0.4433Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Seattle Lab Software Slmail is vulnerable to...

Loan Management System SQL injection | CVE-2023-6311

November 28, 2023

NAME__________Loan Management System SQL injectionPlatforms Affected:Sourcecodester Loan Management System 1.0Risk Level:4.7Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Loan Management System is vulnerable to SQL injection....

Node.js Google translate api browser module server-side request forgery | CVE-2023-48711

November 28, 2023

NAME__________Node.js Google translate api browser module server-side request forgeryPlatforms Affected:Node.js Google translate api browser 4.0.0Risk Level:3.7Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Node.js...

Neutron IP Camera directory traversal | CVE-2023-6118

November 28, 2023

NAME__________Neutron IP Camera directory traversalPlatforms Affected:Neutron IP CameraRisk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Neutron IP Camera could allow a remote attacker to traverse...

TOTVS Fluig Platform cross-site scripting | CVE-2023-6275

November 28, 2023

NAME__________TOTVS Fluig Platform cross-site scriptingPlatforms Affected:TOTVS Fluig Platform 1.6 TOTVS Fluig Platform 1.7 TOTVS Fluig Platform 1.8.0 TOTVS Fluig Platform...

Tecno Mobile 4G Portable WiFi TR118 command execution | CVE-2023-6304

November 28, 2023

NAME__________Tecno Mobile 4G Portable WiFi TR118 command executionPlatforms Affected:Tecno Mobile 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Tecno Mobile 4G...

URL Shortener cross-site scripting | CVE-2023-6313

November 28, 2023

NAME__________URL Shortener cross-site scriptingPlatforms Affected:Sourcecodester URL Shortener 1.0Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________URL Shortener is vulnerable to cross-site scripting, caused by improper...

Main Story

Editor’s Picks

Trending Story

Featured Story

You may have missed