OPENSUSE-SU-2024:0294-1 Security update for kanidm

This update for kanidm fixes the following issues: - kanidm version 1.3.3git0.f075d13: Release 1.3.3 Mail substr index 2981...

PT-2024-38994 · Unknown · Linuxossk Shakal-Ng

Name of the Vulnerable Software and Affected Versions: LinuxOSsk Shakal-NG versions up to 1.3.3 Description: A problematic issue was found in LinuxOSsk Shakal-NG, affecting an unknown function of the file comments/views.py. The manipulation of the next argument leads to open redirect. It is...

Nová generácia Shakal CMS 输入验证错误漏洞

Nová generácia Shakal CMS is an open source content management system for LinuxOSsk. An input validation error vulnerability exists in Nová generácia Shakal CMS version 1.3.3 and earlier, which stems from a manipulation of a parameter that can lead to an open redirect...

Exploit for Path Traversal in Fastadmin

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve...

PT-2024-30480 · Unknown · Formfacade

Name of the Vulnerable Software and Affected Versions: FormFacade versions 1.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This affects the FormFacade, enabling...

SUSE CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

xdg-desktop-portal-hyprland 安全漏洞

xdg-desktop-portal-hyprland is an open source XDG desktop portal for Hyprland by Hypr Development. A security vulnerability exists in xdg-desktop-portal-hyprland versions prior to 1.3.3 that stems from allowing execution of operating system commands...

CVE-2024-37258

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Social Rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.3...

PT-2024-27422 · Unknown · Social Rocket

Name of the Vulnerable Software and Affected Versions: Social Rocket versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For Social Rock...

CVE-2024-37523

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

PT-2024-27628 · Unknown · Amp-Mode Login Logo Editor

Name of the Vulnerable Software and Affected Versions: AMP-MODE Login Logo Editor versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the AMP-MODE Login...

WordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Login Logo Editor versions = 1.3.3...

WordPress Social Rocket Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Social Rocket Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37258 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 44ba23451631 Credits Dimas Maulana Required privilege...

OPENSUSE-SU-2024:11726-1 rke-1.3.3-1.1 on GA media

These are all security issues fixed in the rke-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11534-1 yast2-rmt-1.3.3-1.2 on GA media

These are all security issues fixed in the yast2-rmt-1.3.3-1.2 package on the GA media of openSUSE Tumbleweed...

WordPress plugin Integrate Google Drive security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-14448 · Softlab · Softlab Integrate Google Drive

Name of the Vulnerable Software and Affected Versions: SoftLab Integrate Google Drive versions 1.3.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in SoftLab Integrate Google Drive. Recommendations: For versions 1.3.3 and earlier, at the moment, there is n...

CVE-2024-32818

Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3...

CVE-2024-32818 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.3...

WordPress plugin WordPress Meta Data and Taxonomies Filter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...