2461 matches found
CVE-2024-42054
Cervantes through 0.5-alpha accepts insecure file uploads...
CVE-2024-42055
CVE-2024-42055 affects Cervantes up to version 0.5-alpha and involves a stored XSS vulnerability. Affected component details are not expanded beyond this description in the provided sources. The PT-2024-29715 notice suggests upgrading to a version that includes a fix, but no specific patched vers...
CVE-2024-42054
Cervantes through 0.5-alpha accepts insecure file uploads...
CVE-2024-42055
Cervantes through 0.5-alpha allows stored XSS...
CVE-2024-42054
CVE-2024-42054 affects Cervantes up to version 0.5-alpha, where the product accepts insecure file uploads. The connected documents confirm the core issue is insecure file upload handling, but do not provide concrete technical details (e.g., affected components, exact vectors, or patch versions). ...
CVE-2024-42055
Cervantes through 0.5-alpha allows stored XSS...
PT-2024-29714 · Cervantes · Cervantes
Name of the Vulnerable Software and Affected Versions: Cervantes versions through 0.5-alpha Description: The issue allows for insecure file uploads. Recommendations: For versions through 0.5-alpha, consider restricting file upload functionality until a secure version is available. As a temporary...
CVE-2024-6947 Flute CMS Notification ContentParser.php replaceContent code injection
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been rated as critical. This issue affects the function replaceContent of the file app/Core/Support/ContentParser.php of the component Notification Handler. The manipulation leads to code injection. The attack may be initiated remotely...
CVE-2024-6946 Flute CMS list code injection
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been declared as critical. This vulnerability affects unknown code of the file /admin/pages/list. The manipulation of the argument blocks leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to t...
MAL-2024-7542 Malicious code in sap-alpha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c7ea16f229d72af72ae83984db56f8f4c7b756094805b866b00c6d0fe1b98f3 The OpenSSF Package Analysis project identified 'sap-alpha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-alpha (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c7ea16f229d72af72ae83984db56f8f4c7b756094805b866b00c6d0fe1b98f3 The OpenSSF Package Analysis project identified 'sap-alpha' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2024-39698: Improper Neutralization of Variable Name Delimiters
electron-updater allows for automatic updates for Electron apps. The file packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts implements the signature validation routine for Electron applications on Windows. Because of the surrounding shell, a first pass by cmd.exe expands any...
CVE-2024-39302
BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker may be able to exploit the overly elevated file permissions in the /usr/local/bigbluebutton/core/vendor/bundle/ruby/2.7.0/gems/resque-2.6.0 directory with the goal of privilege...
CVE-2024-39302 Some bbb-record-core files installed with wrong file permission
BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker may be able to exploit the overly elevated file permissions in the /usr/local/bigbluebutton/core/vendor/bundle/ruby/2.7.0/gems/resque-2.6.0 directory with the goal of privilege...
CVE-2024-38518 bbb-web API additional parameters considered
BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker with a valid join link to a meeting can trick BigBlueButton into generating a signed join link with additional parameters. One of those parameters may be "role=moderator", allowing an...
PT-2024-28428 · Unknown · Bigbluebutton
Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.6.18 BigBlueButton versions prior to 2.7.8 BigBlueButton versions prior to 3.0.0-alpha.7 Description: An attacker may exploit overly elevated file permissions in the...
Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting Vulnerability
Exploit Title: Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting XSS Exploit Author: Jerry Thomas w3bn00b3r Vendor Homepage: https://automad.org Software Link: https://github.com/marcantondahmen/automad Category: Web Application Flat File CMS Version: 2.0.0-alpha.4 Tested on: Docker version...
Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting (XSS)
Exploit Title: Automad 2.0.0-alpha.4 - Stored Cross-Site Scripting XSS Date: 20-06-2024 Exploit Author: Jerry Thomas w3bn00b3r Vendor Homepage: https://automad.org Software Link: https://github.com/marcantondahmen/automad Category: Web Application Flat File CMS Version: 2.0.0-alpha.4 Tested on:...
PingCAP TiDB nil pointer dereference
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...