PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass

Post ContentRead More ...

Continue Reading
Liferay Portal 7.4.3.4 < 7.4.3.49 Authentication Bypass

The Object module in Liferay Portal and Liferay DXP does properly isolate objects in difference virtual instances, which allows remote authenticated users in one virtual instance to view objects in a ...

Continue Reading
Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

[![Vulnerability](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() A critical security vulnerability has been disclosed in the Ope ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Liferay Portal 7.4.3.41 <= 7.4.3.52 Reflected XSS

Multiple cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal allow remote attackers to inject arbitrary web script ...

Continue Reading
CVE-2023-28131

A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign- ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

CVE-2022-31107

Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Gra ...

Continue Reading
CVE-2022-21673

Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an ...

Continue Reading
Liferay portal unauthorized access to objects via OAuth 2 scope

The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows remote authenticated user ...

Continue Reading

Back to Main

Subscribe for the latest news: