4792 matches found
CVE-2023-51405
Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74...
CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers
A new ongoing malware campaign has been observed distributing three different stealers, such as CryptBot, LummaC2, and Rhadamanthys hosted on Content Delivery Network CDN cache domains since at least February 2024. Cisco Talos has attributed the activity with moderate confidence to a threat actor...
PT-2026-50367
Name of the Vulnerable Software and Affected Versions Integrate Google Drive versions prior to 1.3.9 Description A missing authorization issue in Prince Integrate Google Drive allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version...
Unauthorized Access
virtualBox is vulnerable to Unauthorized Access. The vulnerability is due to inadequate access controls to the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls to Oracle VM VirtualBox product of Oracle Virtualization, allowing a high privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualbox is vulnerable to Privilege Escalation. The vulnerability is due to insufficient access controls in Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls in Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to insufficient access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to insufficient access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
Privilege Escalation
virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...
TotalCloud Insights: Safeguarding Your Cloud Database from SQL Server Threats and Lateral Movement Risks
Introduction In todays tech-driven world, cloud computing has completely changed how businesses store and manage their data. It offers many advantages, like flexibility, scalability, and cost savings, making it a go-to choice for organizations of all sizes. Keeping your data secure, especially in...
Click to Chat – HoliThemes < 4.0 - Contributor+ LFI
Description The plugin is vulnerable to Local File Inclusion, allowing authenticated attackers, with contributor access or above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensiti...
PT-2024-3525
Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access controls in the Utility component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise the system...
PT-2024-20415 · Silex Technology · Ds-600 Firmware
Name of the Vulnerable Software and Affected Versions: silex technology DS-600 Firmware version 1.4.1 Description: An issue in the silex technology DS-600 Firmware allows a remote attacker to obtain sensitive information via the "GET EEP DATA" command. This issue is related to improper data...
CVE-2024-3765
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530R80X30-PQ8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input...
CVE-2024-3765
CVE-2024-3765 affects Xiongmai devices (AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME, XM530_R80X30-PQ_8M) in the Sofia Service. The vulnerability stems from improper access controls triggered by manipulating a specific input sequence (ff0000000000000000000...
CVE-2024-3136
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP cod...
CVE-2024-3136 MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP cod...