7122 matches found
CVE-2023-51362
Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through = 2.1.3...
CVE-2024-53824
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...
PT-2024-35940
Name of the Vulnerable Software and Affected Versions: AREOI All Bootstrap Blocks versions 1.3.19 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP...
WordPress plugin All Bootstrap Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-53824: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in allbootstrapblocks All Bootstrap Blocks all-bootstrap-blocks allows PHP Local File Inclusion.This issue affects All Bootstrap Blocks: from n/a through = 1.3.19...
DRUPAL-CONTRIB-2024-069
This module provides a field formatter for the field type 'file' called Table of files with download all link . The module had vulnerabilities allowing a user to download files they normally should not be able to download...
PT-2024-10137 · Drupal · Print Anything +1
Name of the Vulnerable Software and Affected Versions: Print Anything versions . Description: The issue is related to insufficient input validation in the Print Anything module of the Drupal CMS system. This can allow a remote attacker to execute arbitrary code. The problem affects all versions o...
PT-2024-10085 · Drupal · Download All Files
Name of the Vulnerable Software and Affected Versions: Download All Files versions 0.0.0 through 2.0.1 Description: The issue is related to a Missing Authorization vulnerability in the Download All Files module for the Drupal CMS, which allows for Forceful Browsing. This vulnerability can be...
Drupal Download All Files module < 2.0.2 - Unauthenticated Broken Access Control vulnerability
Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff in WordPress Module Download All Files versions 2.0.2...
WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin All Bootstrap Blocks versions = 1.3.19...
Malicious code in all-dl-404 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in all-dl-404
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11129 Malicious code in all-dl-404 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-11668
Removed by vendor...
Frankfurt Expansion Now Available for All Customers
Over the past year, Akamai’s core and distributed cloud architecture has grown significantly to better serve our customers requiring greater availability, lower latency, and more freedom of choice when it comes to how and where they run applications and workloads...
podman: podman machine spawns gvproxy with port bound to all IPs
A flaw was found in podman. The podman machine function used to create and manage Podman virtual machine containing a Podman process spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall...
openSUSE Security Advisory (SUSE-SU-2024:4050-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-35697 · Autolab · Autolab
Name of the Vulnerable Software and Affected Versions: Autolab versions 3.0.0 through 3.0.2 Description: Autolab is a course management service that enables auto-graded programming assignments. The issue allows students to download all assignments from another student, as long as they are logged...
Autolab 安全漏洞
Autolab is an open source course management service from Autolab. It supports automatically graded programming assignments. A security vulnerability exists in Autolab version 3.0.0 that stems from the ability of students to download all assignments from other students using the...
