Security Bulletin: IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar (Publicly disclosed vulnerability found by Mend) (CVE-2023-24998)

Summary IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar Publicly disclosed vulnerability found by Mend. The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipar file upload functionality to servlets and web application...

Blackcat Cms v1.4 - Remote Code Execution (RCE)

Exploit Title: Blackcat Cms v1.4 - Remote Code Execution RCE Application: blackcat Cms Version: v1.4 Bugs: RCE Technology: PHP Vendor URL: https://blackcat-cms.org/ Software Link: https://github.com/BlackCatDevelopment/BlackCatCMS Date of found: 13.07.2023 Author: Mirabbas Ağalarov Tested on: Lin...

PT-2023-10300 · WordPress · Wp-Donate

Name of the Vulnerable Software and Affected Versions: wp-donate Plugin versions up to 1.4 Description: A critical issue has been found in the wp-donate Plugin, affecting an unknown part of the file includes/donate-display.php. This issue leads to sql injection and can be initiated remotely...

WordPress Plugin Comment Reply Notification 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Moderate: Red Hat Security Advisory: Red Hat Service Interconnect 1.4 Release security update

This is release 1.4 of the rpms for Red Hat Service Interconnect. Red Hat Service Interconnect 1.4 introduces a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communication between services running in different network locations or sites. It allo...

CVE-2023-2907

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605...

CVE-2023-2907

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605...

CVE-2023-26527

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...

Scriptio 1.4 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

CVE-2020-36715 Login/Signup Popup < 1.5 - Missing Authorization

The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. This makes it possible for authenticated attackers to inject arbitrary web scripts into the plugin settings that execute i...

CVE-2023-30484

Cross-Site Request Forgery CSRF vulnerability in uPress Enable Accessibility plugin = 1.4 versions...

WordPress plugin Import External Images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-22722 · WordPress · Upress Enable Accessibility

Name of the Vulnerable Software and Affected Versions: uPress Enable Accessibility plugin versions = 1.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

WordPress plugin Enable Accessibility 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

PT-2023-15091 · WordPress · Marty Thornley Import External Images Plugin

Name of the Vulnerable Software and Affected Versions: Marty Thornley Import External Images plugin versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintend...

Design/Logic Flaw

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

CVE-2020-36070 affects Voyager (Yoyager) versions 1.4 and earlier. The vulnerability is described as an insecure permission issue that allows a remote attacker to execute arbitrary code by supplying a crafted PHP file to the media component. The issue is classified as critical (CVSS v3.1: 9.8, Ne...

CVE-2015-10103 InternalError503 Forget It settings.js infinite loop

A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.js. The manipulation of the argument setForgetTime with the input 0 leads to infinite loop. It is possible to launch the attack on the loca...

PT-2023-10282 · Unknown · Internalerror503 Forget It

Name of the Vulnerable Software and Affected Versions: InternalError503 Forget It versions up to 1.3 Description: A problematic issue was found in InternalError503 Forget It, affecting an unknown part of the file js/settings.js. The manipulation of the setForgetTime argument with the input 0 lead...

PT-2023-21301 · Unknown · Apng Optimizer

Name of the Vulnerable Software and Affected Versions: APNG Optimizer version 1.4 Description: A buffer overflow issue was discovered in APNG Optimizer via the component /apngopt/ubuntu.png. Recommendations: For APNG Optimizer version 1.4, consider avoiding the use of the /apngopt/ubuntu.png...