PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

CVE-2024-42483

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

WordPress Droip plugin < 2.5.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Droip versions 2.5.2...

WordPress plugin Skitter Slideshow 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Keydatas Plugin <= 2.5.2 is vulnerable to Arbitrary File Upload

Software Keydatas Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.6.1 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-6220 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 1095cb679b31 Credits Foxyyy Required privilege Unauthenticated...

WordPress BLAZE Retail Widget plugin <= 2.5.2 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin BLAZE Retail Widget versions = 2.5.2...

GLSA-202407-05 : SSSD: Command Injection

The remote host is affected by the vulnerability described in GLSA-202407-05 SSSD: Command Injection A vulnerability has been discovered in SSSD. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

OPENSUSE-SU-2024:12241-1 ldb-tools-2.5.2-1.1 on GA media

These are all security issues fixed in the ldb-tools-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11408-1 libipa_hbac-devel-2.5.2-1.4 on GA media

These are all security issues fixed in the libipahbac-devel-2.5.2-1.4 package on the GA media of openSUSE Tumbleweed...

GHSA-GPGJ-XRGW-8MX2 NASA AIT-Core vulnerable to SQL Injection

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

WordPress HT Mega plugin <= 2.5.2 - Missing Authorization to Options Update vulnerability

Missing Authorization to Options Update vulnerability discovered by 1337Wannabe in WordPress Plugin HT Mega versions = 2.5.2...

PT-2024-33203 · WordPress · Ht Mega – Absolute Addons For Elementor

Name of the Vulnerable Software and Affected Versions: HT Mega – Absolute Addons For Elementor plugin for WordPress versions up to, and including, 2.5.2 Description: The issue is related to Stored Cross-Site Scripting via the popover header text parameter due to insufficient input sanitization an...

WordPress HT Mega Plugin <= 2.5.2 is vulnerable to Broken Access Control

Software HT Mega Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4875 Patch priority Low CVSS severity Low 4.3 Developer HTMega PSID dfccf3184973 Credits 1337Wannabe Required privilege Subscriber...

PT-2024-26302

Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the API wait function allows attackers to execute arbitrary code via supplying a crafted string. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about ...

PT-2024-26303

Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the Pickle Python library allows attackers to execute arbitrary commands. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about a newer version that...

WordPress Plugin HT Mega–Absolute Addons For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2024-33201 · WordPress · Ht Mega – Absolute Addons For Elementor

Name of the Vulnerable Software and Affected Versions: HT Mega – Absolute Addons For Elementor plugin for WordPress versions up to, and including, 2.5.2 Description: The issue is related to a missing capability check on the ajax dismiss function, allowing authenticated attackers with...

WordPress HT Mega Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)

Software HT Mega Type Plugin Vulnerable versions = 2.5.2 Fixed in 2.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4876 Patch priority Low CVSS severity Low 6.5 Developer HTMega PSID feb0aa615e6b Credits wesley wcraft Required privilege...