Exploit for Unrestricted Upload of File with Dangerous Type in Elementor Website_Builder

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Exe...

WordPress Elementor 3.6.2 Remote Code Execution Vulnerability

Description: Insufficient Access Control leading to Subscriber+ Remote Code Execution Affected Plugin: Elementor Plugin Slug: elementor Plugin Developer: Elementor Affected Versions: 3.6.0 – 3.6.2 CVE ID: CVE-2022-1329 CVSS Score: 9.9Critical CVSS Vector:...

Wordpress Plugin Elementor Authenticated Upload Remote Code Execution

The WordPress plugin Elementor versions 3.6.0 - 3.6.2, inclusive have a vulnerability that allows any authenticated user to upload and execute any PHP file. This is achieved by sending a request to install Elementor Pro from a user supplied zip file. Any user with Subscriber or more permissions i...

CVE-2021-1329

creationtimestamp| type| source ---|---|--- 2021-02-04 20:34:23+00:00| seen| https://t.me/cibsecurity/23073...

CVE-2021-1329

CVE-2021-1329 affects Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers. The vulnerabilities arise from improper validation of user-supplied input in the web-based management interface, enabling an authenticated attacker with valid administrator credentials to execute arb...

CVE-2020-1329

CVE-2020-1329 affects Microsoft Bing Search for Android. A spoofing vulnerability exists where Bing Search improperly handles certain HTML content, allowing an attacker to spoof URLs and serve malicious content. To exploit, a user must browse a malicious site with Bing Search or be redirected to ...

CVE-2020-1329

A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing Search Spoofing Vulnerability'...

CVE-2019-1329

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...

Privilege escalation

An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1329...

CVE-2019-1329

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...

CVE-2019-1329

CVE-2019-1329 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The issue enables privilege escalation on affected SharePoint Server instances. The provided documents do not include a remediation or patch ...

Description of the security update for SharePoint Foundation 2010: October 8, 2019

Description of the security update for SharePoint Foundation 2010: October 8, 2019 Summary This security update resolves a spoofing vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn more...

CVE-2018-1329

...

CVE-2018-1329

This CVE entry is rejected/not used and not an active vulnerability.

Debian: Security Advisory (DLA-1329-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1329

The CVE-2015-1329 issue affects oxide-qt (Ubuntu 15.04 and 14.04 LTS). The root cause is a use-after-free in oxide::qt::URLRequestDelegatedJob, which may allow remote code execution in the context of the affected browser engine. Impact is remote code execution with the user’s privileges and high ...

IBM Tivoli Storage Manager FastBack Server Opcode 1329 Information Disclosure

The IBM Tivoli Storage Manager FastBack Server running on the remote host is affected by an information disclosure vulnerability due to improper processing of opcode 1329. An unauthenticated, remote attacker can exploit this, by sending a crafted packet to TCP port 11460, to read the contents of...

Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability (cisco-sa-20160302-n3k)

A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. Copyright C 2016 Greenbone Networks GmbH...

CVE-2016-1329

CVE-2016-1329 affects Cisco NX-OS on Nexus 3000 (6.0(2)U6(1)–6.0(2)U6(5)) and Nexus 3500 (6.0(2)A6(1)–6.0(2)A6(5), 6.0(2)A7(1)). The root cause is hardcoded/default credentials present in an account created at installation, allowing unauthenticated remote attackers to obtain root privileges via T...

Cisco Nexus 3000 and 3500 Insecure Default Telnet Credentials (cisco-sa-20160302-n3k)

The remote Cisco Nexus device has a known set of hardcoded default user credentials. An unauthenticated, remote attacker can exploit this to authenticate remotely to the device via Telnet with the privileges of the root user with bash shell access. TRUSTED...