DEBIAN-CVE-2023-27371

GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHDcreatepostprocessor method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a...

GNU libmicrohttpd 缓冲区错误漏洞

GNU libmicrohttpd is an application from the American GNU community. Runs an HTTP server as part of another application. A security vulnerability exists in GNU libmicrohttpd versions prior to 0.9.76, which stems from improperly resolved data boundaries and can be exploited by an attacker to cause...

WordPress plugin Migration, Backup, Staging 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

PT-2022-19118 · WordPress · Migration

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging WordPress plugin versions prior to 0.9.76 Description: The issue allows high privilege users to read any file from the web server via a Traversal attack due to the plugin not sanitising and validating a parameter...