PT-2024-39769 · WordPress · Forminator Forms

Name of the Vulnerable Software and Affected Versions: Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.36.0 Description: The issue is related to Insecure Direct Object Reference, which allows unauthenticated attackers to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing lock in the drm/xe/gucsubmit subsystem in the wedgedfini function, which could lead to post-releas...

PT-2024-33831

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A potential lockup issue has been identified in the Linux kernel, specifically in the iommu/vt-d component, when the qi submit sync function is called with a count of 0. This issue has been...

CVE-2024-9436: Improper Neutralization of Input During Web Page Generation

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.5.14. This makes it possible...

The vulnerability of the usb_submit_urb() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usbsubmiturb function in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow a attacker to trigger a service failure...

UBUNTU-CVE-2024-46760

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right now it's possible to hit NULL pointer dereference in rtwrxfillrxstatus on hw object and/or its fields because initialization routine can start getting USB replie...

HYSCALE System 1.9 Add Administrator / Cross Site Request Forgery

============================================================================================================================================= | Title : HYSCALE System v1.9 CSRF add admin Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64...

Online Notice Board System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : Online Notice Board System project 1.0 Remote File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozil...

SUSE CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

DEBIAN-CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

UBUNTU-CVE-2024-46687

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a use-after-free when hitting errors inside btrfssubmitchunk BUG There is an internal report that KASAN is reporting use-after-free, with the following backtrace: BUG: KASAN: slab-use-after-free in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly manage memory when handling failures in the btrfssubmitchunk function, which could lea...

CVE-2024-8428

The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submitformhandler due to missing validation on the 'userid' user controlled key. This makes it possible...

CVE-2024-41346

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/submit.php...

openflights 安全漏洞

OpenFlights is a tool by Jani Patokallio individual developer. It can map flights around the world. A security vulnerability exists in openflights version 5234b5b, which stems from the presence of a cross-site scripting XSS vulnerability via php/submit.php...

PT-2024-29364

Name of the Vulnerable Software and Affected Versions openflights version 5234b5b Description The issue is a Cross-Site Scripting XSS vulnerability. It occurs via the "php/submit.php" endpoint. Recommendations For version 5234b5b, as a temporary workaround, consider disabling access to the...

PT-2024-8011

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.48/6.10.7 Description A use-after-free vulnerability has been identified in the Linux kernel's btrfs file system, specifically in the btrfs submit chunk function. This vulnerability can be triggered when the...

CVE-2024-42608

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/submitpage.php...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of a cross-site request forgery vulnerability , the vulnerability stems from /admin/submitpage.php does not adequately verify whether the request is from a trusted user , an attacker can use this...

PT-2024-30060 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. It affects the /admin/submit page.php endpoint. Recommendations: For Pligg CMS version 2.0.2, update to a version that includes a fi...