CVE-2024-42783

Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manageplaylistitems.php. An attacker can execute arbitrary SQL commands via the "pid" parameter...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A SQL injection vulnerability exists in Kashipara Music Management System v1.0, which originates from the lack of validation of the pid parameter of /music/manageplaylistitems.php against external SQL input, and can be...

AgileBits 1Password IPC Protection Bypass (CVE-2024-42219) (macOS)

The version of AgileBits 1Password installed on the remote macOS or Mac OS X host is prior to 8.10.36. It is, therefore, affected by an inter-process communication bypass vulnerability that allows local attackers to exfiltrate vault items. Note that Nessus has not tested for this issue but has...

PT-2024-38071 · WordPress · Essential Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress versions up to, and including, 5.9.27 Description: The issue is related to Stored Cross-Site Scripting via the no more...

CVE-2024-42219

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient...

CVE-2024-42218

1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms...

PT-2024-29794 · Agilebits · 1Password

Name of the Vulnerable Software and Affected Versions: 1Password versions prior to 8.10.36 for macOS Description: The issue allows local attackers to exfiltrate vault items due to insufficient XPC inter-process communication validation. Recommendations: For versions prior to 8.10.36, update to...

CVE-2024-42218: Improper Validation of Unsafe Equivalence in Input

1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms...

AgileBits 1Password For Mac 安全漏洞

AgileBits 1Password For Mac is a password management software from AgileBits Canada. It is used to store a variety of different passwords. A security vulnerability exists in AgileBits 1Password For Mac versions prior to 8.10.38, which stems from a vulnerability that allows a local attacker to...

PT-2024-29793 · Agilebits · 1Password 8

Name of the Vulnerable Software and Affected Versions: 1Password 8 versions prior to 8.10.38 for macOS Description: The issue allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms. Recommendations: For 1Password 8 versions prior to 8.10.38, update to...

CVE-2024-42219

1Password for macOS (AgileBits) is affected: versions prior to 8.10.36 are vulnerable to an inter-process communication bypass due to insufficient XPC IPC validation, enabling local attackers to exfiltrate vault items. Remediation: update to 8.10.36 or later. Affected product/version details and ...

CVE-2024-42219

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient...

PT-2024-32131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race issue has been resolved in the Linux kernel's workqueue. The issue occurred when flushing a work item for cancellation, and the flush work function knew it exclusively owned...

Rockwell Automation ControlLogix 安全漏洞

Rockwell Automation ControlLogix is a controller from Rockwell Automation. A security vulnerability exists in Rockwell Automation ControlLogix that stems from a bypass issue where an attacker may be able to execute CIP commands to modify user items or device configurations on the controller...

CVE-2024-40779

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process cra...

UBUNTU-CVE-2024-41063

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: cancel all works upon hciunregisterdev syzbot is reporting that calling hcireleasedev from hcierrorreset due to hcidevput from hcierrorreset can cause deadlock at destroyworkqueue, for hcierrorreset is called...

CVE-2024-41550

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CVE-2024-41551

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

CampCodes Supplier Management System 安全漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A security vulnerability exists in CampCodes Supplier Management System version v1.0, which stems from an SQL injection vulnerability via SupplyManagementSystem/admin/vieworderitems.php?id=...

PT-2024-29443 · Unknown · Campcodes Supplier Management System

Name of the Vulnerable Software and Affected Versions: CampCodes Supplier Management System version 1.0 Description: The issue concerns SQL injection. It can be exploited via the "Supply Management System/admin/view order items.php?id=" endpoint, specifically through the id variable...