MiniUPnPd 1.4 Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MiniUPnPd 1.4 Denial of Service DoS Exploit', 'Description' = %q This module allows remote attackers to cause a denial of service DoS in MiniUPnP...

WordPress plugin SendGrid for WordPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SendGrid for WordPress versions = 1.4...

WordPress plugin Ultimate Classified Listings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2024-35767

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze allows Code Injection.This issue affects Squeeze: from n/a through 1.4...

WordPress plugin Squeeze code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress Squeeze plugin <= 1.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by YCInfosec Patchstack Alliance in WordPress Plugin Squeeze versions = 1.4...

OPENSUSE-SU-2024:11392-1 solanum-0~ch448-1.4 on GA media

These are all security issues fixed in the solanum-0ch448-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10776-1 gcab-1.4-2.9 on GA media

These are all security issues fixed in the gcab-1.4-2.9 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10993-1 libsolv-demo-0.7.19-1.4 on GA media

These are all security issues fixed in the libsolv-demo-0.7.19-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10156-1 libraw-devel-0.17.2-1.4 on GA media

These are all security issues fixed in the libraw-devel-0.17.2-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11409-1 stb-devel-2.36.1594640766.b42009b-1.4 on GA media

These are all security issues fixed in the stb-devel-2.36.1594640766.b42009b-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10650-1 bind-9.16.20-1.4 on GA media

These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10228-1 python-libxml2-2.9.4-1.4 on GA media

These are all security issues fixed in the python-libxml2-2.9.4-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11408-1 libipa_hbac-devel-2.5.2-1.4 on GA media

These are all security issues fixed in the libipahbac-devel-2.5.2-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10239-1 perl-LWP-Protocol-https-6.06-1.4 on GA media

These are all security issues fixed in the perl-LWP-Protocol-https-6.06-1.4 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: denial of service when forwarding invalid file descriptors CVE-2014-3533 - The dbus-daemon in D-Bus...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2024-3047)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3047 advisory. - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in...

WordPress Pet Manager plugin <= 1.4 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Pet Manager versions = 1.4...

PT-2024-28375 · WordPress · The Pet Manager

Name of the Vulnerable Software and Affected Versions: The Pet Manager WordPress plugin versions 1.4 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the...