1511 matches found
PT-2025-3229 · Unknown · Acf City Selector
Name of the Vulnerable Software and Affected Versions: ACF City Selector versions 1.14.0 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited by uploading malicious files...
WordPress plugin ACF City Selector 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2024-56264: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through = 1.14.0...
WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin ACF City Selector versions = 1.14.0...
The vulnerability of the XMLParser component in the CI/CD application integration and delivery system of JetBrains TeamCity allows attackers to perform XXE attacks.
The vulnerability of the XMLParser component in the CI/CD application integration and delivery system of JetBrains TeamCity is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...
CVE-2024-11587
A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...
Immigration Police Can Already Sidestep US Sanctuary City Laws Using Data-Sharing Fusion Centers
Built to combat terrorism, fusion centers give US Immigration and Customs Enforcement a way to gain access to data that’s meant to be protected under city laws limiting local police cooperation with ICE...
A week in security (November 4 – November 10)
Last week on Malwarebytes Labs: Hello again, FakeBat: popular loader returns after months-long hiatus TikTok ordered to close Canada offices following "national security review" Air fryers are the latest surveillance threat you didn’t consider Malwarebytes acquires AzireVPN to fuel additional VPN...
City of Columbus breach affects around half a million citizens
A ransomware attack against the City of Columbus, Ohio—which drew public scrutiny following the city government's attempt to silence a researcher who told the public about the attack—has received a little more detail from an unexpected source: The Attorney General for the state of Maine. In a dat...
CVE-2024-9805: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/campsdetails.php. The manipulation of the argument hospital/address/city/contact leads to cross site scripting. The attack may be...
CVE-2024-9084: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be...
CVE-2024-44551
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv...
CVE-2024-44555
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo...
CVE-2024-44551
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv...
Tenda AX1806 安全漏洞
The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 suffers from a buffer overflow vulnerability that stems from the iptv.city.vlan parameter in formGetIptv containing a stack overflow. No detailed vulnerability details are provided at this time...
PT-2024-31178 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.city.vlan parameter in the setIptvInfo function. This allows for potential exploitation. No information is provided about the estimated number of...
Take a Selfie Using a NY Surveillance Camera
This site will let you take a selfie with a New York City traffic surveillance camera. EDITED TO ADD: BoingBoing post...
Malicious code in @taxify/city-borders (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041f06eacb4e8e5ffe66ccd96009305833355630bf63940b876d7c7f3ce7bd55 The OpenSSF Package Analysis project identified '@taxify/city-borders' @ 10.0.0 npm as malicious. It is considered malicious because: - The...
CVE-2024-27090
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embbeded such as a...
CVE-2024-27090 Decidim vulnerable to data disclosure through the embed feature
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embbeded such as a...