OPENSUSE-SU-2024:11522-1 xmlgraphics-batik-1.14-2.5 on GA media

These are all security issues fixed in the xmlgraphics-batik-1.14-2.5 package on the GA media of openSUSE Tumbleweed...

PT-2024-22549 · Unknown · Debezium Community Debezium-Ui

Name of the Vulnerable Software and Affected Versions: Debezium Community debezium-ui version 2.5 Description: An issue in Debezium Community debezium-ui allows a local attacker to execute arbitrary code via the refresh page function. Recommendations: For Debezium Community debezium-ui version 2....

PT-2024-10556 · Varnish +1 · Varnish +1

Name of the Vulnerable Software and Affected Versions: Symfony HttpKernel component versions 2.2.X through 2.5.X Description: This issue affects applications with the ESI feature enabled and a proxy in front of the web application. The FragmentHandler considers requests to render fragments as...

PT-2024-10555 · Symfony · Symfony Httpfoundation

Name of the Vulnerable Software and Affected Versions: Symfony HttpFoundation component versions 2.0.X through 2.5.X Description: This issue allows for a Denial of Service DoS attack when an arbitrarily long hostname is sent by a client. The parsing of the hostname in the Request::getHost functio...

libigl 缓冲区错误漏洞

libigl is a simple C++ geometry processing library open-sourced by libigl. A buffer error vulnerability exists in libigl version v2.5.0. An attacker exploits this vulnerability to cause an out-of-bounds read via a specially crafted .msh file...

Guntech 2.5 to Launch in Upland’s Gaming Ecosystem

By Uzair Amir Mathilda Studios Partners with Upland to Introduce Guntech 2.5 into Upland’s Web3 Gaming Platform with +10 Locations and… This is a post from HackRead.com Read the original post: Guntech 2.5 to Launch in Upland’s Gaming Ecosystem...

PT-2024-25122 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.5 Description: The issue allows attackers to execute arbitrary code via a crafted JSP file, exploiting an arbitrary file upload vulnerability. This vulnerability is accessible via the customPath parameter in the upload...

WordPress WP Portfolio Theme <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software WP Portfolio Type Theme Vulnerable versions = 2.4 Fixed in 2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33537 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 960b34eee068 Credits stealthcopter Required privilege Contributor...

CVE-2024-32161

jizhiCMS 2.5 suffers from a File upload vulnerability...

CVE-2024-32161

jizhiCMS 2.5 suffers from a File upload vulnerability...

CVE-2024-32161

CVE-2024-32161 affects jizhiCMS 2.5 with a file upload vulnerability. The available data identify the issue as a file upload flaw in jizhiCMS 2.5, but do not specify the vulnerable file, module, or root cause in exact technical terms. CVSS v3.1 metrics indicate a CRITICAL severity (9.8) with netw...

WordPress Restrict User Access – Membership Plugin with Force Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software Restrict User Access – Membership Plugin with Force Type Plugin Vulnerable versions = 2.5 Fixed in 2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29138 Patch priority Medium CVSS severity Medium 7.1 Developer DEV Institute PSID 211a6e23f622 Credits...

WordPress Plugin Restrict User Access Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

BIT-RUBY-2020-10933

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

Xitami 2.5 Denial Of Service

!/usr/bin/perl use IO::Socket::INET; Exploit Title: Xitami 2.5 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 14 january 2024 Vendor Homepage: https://imatix-legacy.github.io/xitami.com/ Download to demo:...

Xitami 2.5 Denial Of Service Exploit

!/usr/bin/perl use IO::Socket::INET; Exploit Title: Xitami 2.5 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 14 january 2024 Vendor Homepage: https://imatix-legacy.github.io/xitami.com/ Download to demo:...

CVE-2023-27739

easyXDM 2.5 allows XSS via the xdme parameter...

Cross site scripting

easyXDM 2.5 allows XSS via the xdme parameter...

EasyXDM Security Vulnerability

EasyXDM is a lightweight open source JavaScript cross domain solution . The solution implements the encapsulation of various cross-domain solutions to eliminate the limitations imposed by the same-origin policy and to facilitate cross-domain communication of applications through JavaScript APIs. ...

CVE-2024-0201

The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'savesettings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions ...