• CVE-2022-47608 (quick_contact_form)

    Updated: 2023-04-25 17:15:08
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= .0.3.1 versions.

  • Difference between Commercial and Non-commercial Sources of Energy

    Updated: 2023-04-25 08:31:22
    Energy is a key component for most of the consumption activities and production activities and hence plays a vital role in a country’s economic growth… Read More The post Difference between Commercial and Non-commercial Sources of Energy appeared first on GeeksforGeeks.

  • Difference between Motivation and Morale

    Updated: 2023-04-25 07:09:05
    Motivation: Motivation is what drives people to take action and reach their goals. In business, motivated employees can lead to a better work environment, improved… Read More The post Difference between Motivation and Morale appeared first on GeeksforGeeks.

  • Maximum sum of Sublist with composite number nodes in a Linked List

    Updated: 2023-04-25 06:33:10
    Given a linked list, the task is to find the maximum sum of a sublist with composite number nodes. A composite number is any positive… Read More The post Maximum sum of Sublist with composite number nodes in a Linked List appeared first on GeeksforGeeks.

  • Make the String lexicographically larger

    Updated: 2023-04-25 06:18:22
    Given a string str of length n. The task is to find a lexicographic largest string where you are allowed to shift one character from… Read More The post Make the String lexicographically larger appeared first on GeeksforGeeks.

  • 100 Days of Web Development – A Complete Guide For Beginners

    Updated: 2023-04-25 06:07:44
    How to become Web Developer?  What is the salary of a Web Developer? What are the skills required to become a web developer?  How many… Read More The post 100 Days of Web Development – A Complete Guide For Beginners appeared first on GeeksforGeeks.

  • Introduction to Doubly Linked Lists in Java

    Updated: 2023-04-25 06:03:41
    Doubly linked list is a data structure that has reference to both the previous and next nodes in the list. It provides simplicity to traverse,… Read More The post Introduction to Doubly Linked Lists in Java appeared first on GeeksforGeeks.

  • Ascending order of three integers after XOR operation

    Updated: 2023-04-25 05:42:56
    Given three distinct integers X, Y, Z. Find an integer N that after performing XOR of each element, integers must follow that X should be… Read More The post Ascending order of three integers after XOR operation appeared first on GeeksforGeeks.

  • Difference between Reward and Incentive

    Updated: 2023-04-25 05:41:18
    Rewards and incentives are powerful tools that can significantly impact the motivation, behaviour, and performance of individuals or teams. They are designed to encourage desired… Read More The post Difference between Reward and Incentive appeared first on GeeksforGeeks.

  • Cash Flow Statement Format

    Updated: 2023-04-25 05:13:48
    The movement of cash & cash equivalents or inflow and outflow of cash is known as Cash Flow. Cash inflows are the transactions that result… Read More The post Cash Flow Statement Format appeared first on GeeksforGeeks.

  • Infosys Interview Experience

    Updated: 2023-04-25 05:11:43
    I participated in the Infosys On-campus Placements and the selection process consisted of four rounds: Round 1: There were two coding questions: Find the longest… Read More The post Infosys Interview Experience appeared first on GeeksforGeeks.

  • National Instruments Interview Experience (On-Campus)

    Updated: 2023-04-25 05:11:23
    ProfilePost Grad Tier-I College Round – 1 (OA Round)It is an Online Assessment Round. I received an Email about this round and the round was… Read More The post National Instruments Interview Experience (On-Campus) appeared first on GeeksforGeeks.

  • CVE-2022-45837 (wechat_robot)

    Updated: 2023-04-25 00:15:09
    Reflected Cross-Site Scripting (XSS) vulnerability in Denis ???????? plugin <= .0.1 versions.

  • CVE-2022-47435 (wp-olivecart)

    Updated: 2023-04-23 10:15:07
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Olive Design WP-OliveCart plugin <= .1.3 versions.

  • CVE-2022-45361 (0mk_shortener)

    Updated: 2023-04-23 10:15:07
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Boris Kuzmanov 0mk Shortener plugin <= .2 versions.

  • CVE-2022-44743 (jobs_for_wordpress)

    Updated: 2023-04-23 10:15:07
    Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in BlueGlass Jobs for WordPress plugin <= .5.11.2 versions.

  • CVE-2022-44594 (all_in_one_time_clock_lite)

    Updated: 2023-04-23 10:15:07
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= .3.320 versions.

  • CVE-2022-44582 (apptivo_business_site_crm)

    Updated: 2023-04-23 09:15:07
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin <= .0.12 versions.

  • CVE-2021-33972 (safe_browser)

    Updated: 2023-04-19 21:15:06
    Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges.

  • CVE-2021-28254 (laravel)

    Updated: 2023-04-19 00:15:07
    A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.

  • CVE-2022-45836 (download_manager)

    Updated: 2023-04-18 14:15:07
    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

  • CVE-2022-44632 (content-repeater)

    Updated: 2023-04-18 14:15:07
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified plugin <= .1.13 versions.

  • CVE-2022-45839 (wha_puzzle)

    Updated: 2023-04-18 13:15:09
    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= .0.9 versions.

  • CVE-2022-45838 (arforms_form_builder)

    Updated: 2023-04-18 13:15:09
    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= .5.5 versions.

  • CVE-2022-44735 (wp_clictracker)

    Updated: 2023-04-18 13:15:08
    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= .0.5 versions.

  • CVE-2022-48314 (emui, harmonyos)

    Updated: 2023-04-16 08:15:07
    The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

  • CVE-2022-48313 (emui, harmonyos)

    Updated: 2023-04-16 08:15:07
    The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

  • CVE-2022-48312 (emui, harmonyos)

    Updated: 2023-04-16 07:15:52
    The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and integrity.

  • CVE-2021-45464 (kvmtool)

    Updated: 2023-04-15 23:15:13
    kvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci.c. This allows a guest OS user to execute arbitrary code on the host machine.

  • CVE-2018-17451 (gitlab)

    Updated: 2023-04-15 23:15:13
    An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request Forgery (CSRF) in the Slack integration for issuing slash commands.

  • CVE-2020-29007 (score)

    Updated: 2023-04-15 22:15:06
    The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code.

  • CVE-2021-39295 (openbmc)

    Updated: 2023-04-15 20:16:00
    In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid (IPMI lan+) interface.

  • CVE-2022-48178 (x2crm)

    Updated: 2023-04-15 01:15:06
    X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.

  • CVE-2022-48177 (x2crm)

    Updated: 2023-04-15 01:15:06
    X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.

  • CVE-2022-47501 (ofbiz)

    Updated: 2023-04-14 16:15:07
    Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.

  • CVE-2022-48468 (protobuf-c)

    Updated: 2023-04-13 21:15:07
    protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

  • CVE-2022-45064 (sling)

    Updated: 2023-04-13 11:15:06
    The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-based cross-site scripting issues on the Apache Sling level. The vulnerability is exploitable by an attacker that is able to include a resource with specific content-type and control the include path (i.e. writing content). The impact of a successful attack is privilege escalation to administrative power. Please update to Apache Sling Engine >= 2.14.0 and enable the "Check Content-Type overrides" configuration option.

  • CVE-2022-37462 (upstream_works_on_finesse)

    Updated: 2023-04-10 13:15:06
    A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.

  • Redux tutorial with Contentful

    Updated: 2023-04-07 08:30:00
    How to use Redux to manage application state and data-fetching logic in a React project, and how to apply these techniques to data coming from Contentful.

Current Feed Items | Previous Months Items

Mar 2023 | Feb 2023 | Jan 2023 | Dec 2022 | Nov 2022