WordPress All-in-One WP Migration 7.64 plugin - Unauthenticated Backup Download Exploit

Title: All-in-One-WP-Migration-7.64 low-protection-file-disclosure - Unauthenticated Backup Download Author: nu11secur1ty Date: 09.01.2022 Vendor: https://servmask.com/ Software: https://wordpress.org/plugins/all-in-one-wp-migration/ Reference:...

Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage various types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira versions prior to 2.0.6 that stems from the Netic User Export plugi...

CVE-2022-36638

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...

ManageEngine ADAudit Plus Xnode Enumeration

This module exploits default admin credentials for the DataEngine Xnode server in ADAudit Plus versions prior to 6.0.3 6032 in order to dump the contents of Xnode data repositories tables, which may contain a limited amount of Active Directory information including domain names, host names,...

CVE-2022-2896

Measuresoft ScadaPro Server All Versions allows use after free while processing a specific project file...

CVE-2022-2896 Measuresoft ScadaPro Server Use After Free

Measuresoft ScadaPro Server All Versions allows use after free while processing a specific project file...

CVE-2022-2897

CVE-2022-2897 affects Measuresoft ScadaPro Server and Client (all versions). The issue is improper link resolution before file access (link following) that can lead to local privilege escalation. Public sources describe a local attack requiring initial code execution by a low-privileged user, wit...

CVE-2022-2898

CVE-2022-2898 affects Measuresoft ScadaPro Server and Client (All Versions). The issue is improper link resolution before file access (Link Following), leading to a Denial-of-Service condition. Exploitation in public advisories indicates a local attacker with low privileges may abuse the ScadaPro...

CVE-2022-2638

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

CVE-2022-2638

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

Path traversal

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

CVE-2022-2638

CVE-2022-2638 affects the WordPress Export All URLs plugin prior to version 4.4. The vulnerability arises from insufficient validation of the path of the CSV file to be removed, enabling high-privilege users to delete arbitrary files on the server. Public sources in the connected documents consis...

CVE-2022-22897

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data...

get-process-by-name 安全漏洞

get-process-by-name is a library by Justin Personal Developer. Get process letters using executable names. A security vulnerability exists in all versions of the get-process-by-name package that stems from its mishandling of the getProcessByName function leading to arbitrary code execution...

CVE-2022-2638: External Control of File Name or Path

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

WordPress plugin Export All URLs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2022-17822 · WordPress · Export All Urls

Name of the Vulnerable Software and Affected Versions: Export All URLs WordPress plugin versions prior to 4.4 Description: The issue concerns a lack of validation for the file path to be removed on the system, which is supposed to be a CSV file. This could allow high privilege users to delete...

PT-2022-7446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missing cpus read lock in the cgroup attach task all function, which can cause a deadlock. This problem is associated with the cpuset attach function and the cp...

All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

The plugin uses the wrong content type for, and does not properly escape the response from the ai1wmexport action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response that will be executed in the victims session. "...

PT-2022-4637 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the incorrect resolution of links before file access in the Measuresoft ScadaPro Server and Client. This could potentially allow a remote attacker to...