8675 matches found
PT-2024-37170 · WordPress · Business Card Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: Business Card WordPress plugin version 1.0.0 Description: The issue allows high privilege users, such as administrators, to upload malicious PHP files, potentially enabling them to run arbitrary code on servers hosting their site. This issue...
WordPress plugin Business Card 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...
WordPress Business Card Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload
Software Business Card Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2024-5807 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID a6a458d61852 Credits Anjo Rev Tingson Required privilege...
DEBIAN-CVE-2024-42089
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in fslasoccardaudmuxinit. Move this assignment at the start of the probe function, so sub-functions can correctly use pdev through priv...
CVE-2024-42089
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in fslasoccardaudmuxinit. Move this assignment at the start of the probe function, so sub-functions can correctly use pdev through priv...
CVE-2024-42089
CVE-2024-42089 affects the Linux kernel’s ASoC: fsl-asoc-card driver. The root cause is that priv->pdev was assigned after it was used in fsl_asoc_card_audmux_init(), risking a NULL dereference because priv is zero-initialised. The fix moves the priv->pdev assignment to the start of the pro...
CVE-2024-42089 ASoC: fsl-asoc-card: set priv->pdev before using it
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in fslasoccardaudmuxinit. Move this assignment at the start of the probe function, so sub-functions can correctly use pdev through priv...
CVE-2024-42089 ASoC: fsl-asoc-card: set priv->pdev before using it
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in fslasoccardaudmuxinit. Move this assignment at the start of the probe function, so sub-functions can correctly use pdev through priv...
CVE-2024-42089 ASoC: fsl-asoc-card: set priv->pdev before using it
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in fslasoccardaudmuxinit. Move this assignment at the start of the probe function, so sub-functions can correctly use pdev through priv...
MAL-2024-7822 Malicious code in usaa-message-card (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf3238e942e0b80b48645634f7548320e2fab682269d38213ec514a47691a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in usaa-message-card (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf3238e942e0b80b48645634f7548320e2fab682269d38213ec514a47691a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c
An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl on the resulting file descriptor to crash the system, causing a denial of service...
Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files
Threat actors have been observed using swap files in compromised websites to conceal a persistent credit card skimmer and harvest payment information. The sneaky technique, observed by Sucuri on a Magento e-commerce site's checkout page, allowed the malware to survive multiple cleanup attempts, t...
Exploit for CVE-2024-34329
CVE-2024-34329 Tested Product: Datacard XPS Card Printer Drive...
PT-2024-25789 · Entrust Datacard · Entrust Datacard Xps Card Printer Driver
Name of the Vulnerable Software and Affected Versions: Entrust Datacard XPS Card Printer Driver versions 8.5 and earlier without the dxp1-patch-E24-004 patch Entrust Datacard XPS Card Printer Driver versions 8.4 and earlier Description: The issue is related to insecure permissions in the Entrust...
Managing Risk During the CrowdStrike Global Tech Outage
Managing Risk During the CrowdStrike Global Tech Outage By Mo Cashman & Trellix Advanced Research Center · July 19, 2024 Updated: July 25, 2024 How it Happened A defective content update provided by cybersecurity firm CrowdStrike caused Microsoft Windows systems to crash, disrupting airline trave...
CVE-2024-36438
eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...
CVE-2024-36438
eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...
CVE-2024-36438
CVE-2024-36438 affects the eLinkSmart Hidden Smart Cabinet Lock. The connected sources confirm an incorrect access control/authorization check vulnerability in the device, which can enable card duplication and related attacks. No concrete patch/version or remediation is provided in the documents;...