CVE-2024-22459

Dell ECS (versions 3.6–3.6.2.5, 3.7–3.7.0.6, and 3.8–3.8.0.4) contains an improper access control vulnerability that could allow a remote high-privileged attacker to access all buckets and their data within a namespace. The issue is confirmed across multiple sources in the connected documents and...

PT-2024-19437 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions 3.6 through 3.6.2.5 Dell ECS versions 3.7 through 3.7.0.6 Dell ECS versions 3.8 through 3.8.0.4 Description: The issue is related to an improper access control vulnerability. A remote high privileged attacker could potential...

PT-2024-15744 · WordPress · Wp Private Content Plus

Name of the Vulnerable Software and Affected Versions: WP Private Content Plus plugin for WordPress versions up to, and including, 3.6 Description: The issue is related to information disclosure due to the plugin not properly restricting access to posts via the REST API when a page has been made...

CVE-2024-0736

A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

Design/Logic Flaw

A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-0736

CVE-2024-0736 affects EFS Easy File Sharing FTP 3.6, specifically the Login component. The vulnerability arises from manipulating the password argument, causing denial of service. It can be exploited remotely and the exploit has been disclosed publicly. PT Security guidance notes no known fix and...

CVE-2024-0736 EFS Easy File Sharing FTP Login denial of service

A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part of the component Login. The manipulation of the argument password leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

PT-2024-15793 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 3.6 Description: A problematic vulnerability has been found in the Login component of the software. The manipulation of the password argument leads to denial of service. This issue can be exploited remotely...

CVE-2024-0208

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file...

[SECURITY] Fedora 38 Update: python3.6-3.6.15-22.fc38

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

[SECURITY] Fedora 39 Update: python3.6-3.6.15-22.fc39

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

Fedora: Security Advisory (FEDORA-2023-88fbb78cd3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MacMaster - MAC Address Changer

MacMaster is a versatile command line tool designed to change the MAC address of network interfaces on your system. It provides a simple yet powerful solution for network anonymity and testing. Features Custom MAC Address: Set a specific MAC address to your network interface. Random MAC Address:...

Rocky Linux 8 : maven:3.6 (RLSA-2022:1860)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1860 advisory. - Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.U...

WordPress Popup with fancybox Plugin <= 3.5 is vulnerable to SQL Injection

Software Popup with fancybox Type Plugin Vulnerable versions = 3.5 Fixed in 3.6 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5465 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 12bd56b92eb5 Credits István Márton Required privilege Contributor...

CVE-2021-26737

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

Zscaler Client Connector Code Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector Path Traversal Vulnerability

Zscaler Client Connector is an application for zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications is secure and complies with the organization's policies, even when not on the corporate network. ecto is a toolkit...

PT-2023-12108 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer and Uninstallers for Windows versions prior to 3.6 Description: The issue is related to an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges...

CVE-2022-4290

The CVE-2022-4290 entry concerns the WordPress plugin Cyr to Lat. It is affected up to version 3.5; the root cause is insufficient escaping and lack of proper SQL query preparation in ctl_sanitize_title, enabling authenticated users to append malicious SQL and potentially read sensitive data. A p...