16 matches found
Exploit for CVE-2024-49653
📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 V...
Linux Distros Unpatched Vulnerability : CVE-2022-49653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH...
CVE-2022-49653
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...
CVE-2022-49653
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...
CVE-2022-49653 i2c: piix4: Fix a memory leak in the EFCH MMIO support
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...
CVE-2022-49653
The CVE refers to a Linux kernel i2c piix4 EFCH MMIO memory leak introduced by EFCH MMIO support. The root cause was release_resource() not freeing memory, causing leak; the fix uses release_mem_region() to free memory and restore symmetry between legacy and MMIO paths. Affected component: Linux ...
CVE-2022-49653 i2c: piix4: Fix a memory leak in the EFCH MMIO support
In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...
CVE-2024-49653
creationtimestamp| type| source ---|---|--- 2024-10-23 19:03:58+00:00| seen| https://t.me/cvedetector/8715 2025-03-23 04:00:07+00:00| published-proof-of-concept| Telegram/b6Jl7wzygae-BXh-Sewt-DVRMooLLWTuD3fD59x1efx7TE 2025-03-23 16:00:12+00:00| published-proof-of-concept|...
CVE-2024-49653 WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...
CVE-2024-49653 WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through = 1.2...
WordPress Portfolleo Plugin <= 1.2 is vulnerable to Arbitrary File Upload
Software Portfolleo Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49653 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 8f930c167ec6 Credits stealthcopter Required privilege Subscriber...
CVE-2023-49653
creationtimestamp| type| source ---|---|--- 2023-12-20 10:42:27+00:00| seen| https://t.me/ctinow/156859...
CVE-2023-49653
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
CVE-2023-49653
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...
CVE-2023-49653
CVE-2023-49653 affects the Jenkins Jira Plugin (versions 3.11 and earlier). The root cause is that the plugin does not set the appropriate context for credentials lookup, enabling attackers with Item/Configure permission to access and capture credentials they are not entitled to. Remediation: upg...
Jenkins plugins Multiple Vulnerabilities (2023-11-29)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Medium Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing the use of system-scoped...