WordPress Content Copy Protection & Prevent Image Save <= 1.3 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Request Forgery CSRF vulnerability discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

Mozilla Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in the Rust standard library prior to version 1.49.0, which stems from the fact that it allows a non-UTF-8 Rust string to be created when there is a problem with the suppli...

WordPress Contact Form Check Tester plugin <= 1.0.2 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by 0xB9 in WordPress Contact Form Check Tester plugin versions = 1.0.2. Solution This plugin has been closed as of March 25, 2021 and is not available for download. This closure is permanent...

The vulnerability of the elf_end function in the libelf library, a set of utilities for processing ELF objects, relates to the issue of allowing the output operation to be within acceptable data buffer limits. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the elfend function in the libelf library is related to improper closure of the ar file. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

WordPress WP Inimat plugin <= 1.0 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by WPScan security research team in WordPress WP Inimat plugin versions = 1.0. Solution 2020-02-15 - we were unable to find a patched version of this plugin. Notice from WordPress plugin repository: "This plugin has been closed as of January 14, 2021 a...

WordPress Teaser Maker plugin <= 0.1.114 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by WPScan security research team in WordPress Teaser Maker plugin versions = 0.1.114. Solution 2020-02-15 - we were unable to find a patched version of this plugin. Notice from WordPress plugin repository: "This plugin has been closed as of January 14,...

PT-2021-27635

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash involves the OT::LigatureSubstFormat1::closure and OT::hb closure context t::dispatch...

PT-2021-27463

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported, identified as a Stack-use-after-return READ 1 type. The crash state involves several function calls, including BEInt::operator...

PT-2021-27529

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash involves the OT::Coverage::intersects and OT::ContextFormat2::closure functions, as well...

Crimson Resources Improperly Closed or Released Vulnerability

Crimson is a programming software from Red Lion. Crimson suffers from a resource improperly closed or freed vulnerability. An attacker can exploit this vulnerability by sending a specially crafted message to leak arbitrary memory locations...

Design/Logic Flaw

An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations in safe code...

WordPress Internal Links Manager plugin <= 2.1.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by Chevon Phillip in WordPress Internal Links Manager plugin versions = 2.1.0. Solution 2020-12-28 - we were unable to find a patched version of this plugin. Notification from WordPress.org - "This plugin has been closed...

Automattic: Reflected XSS in https://www.intensedebate.com/js/getCommentLink.php

Hey there, I have found a reflected dom xss vulnerability in your website www.intensedebate.com, the posttitle parameter is vulnerable. --------------------------------------------------------------------------------------------------------------------------------------------------- Full url:...

Security update for tmux (moderate)

openSUSE Security Update: Security update for tmux Announcement ID: openSUSE-SU-2020:1834-1 Rating: moderate References: 1037468 1116887 1120170 1178263 Cross-References: CVE-2018-19387 CVE-2020-27347 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE...

Basecamp: User can upload files even after closing his account

Summary: =========================== Hello @basecamp This is my first report on your program and I hope to end well : . I was testing https://app.hey.com/ and I my account has been closed, so I back to the requests history, and I tried to send these requests even my account closed. and I found th...

RUSTSEC-2020-0059 MutexGuard::map can cause a data race in safe code

Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...

Cross-Site Scripting in google-closure-library

Versions of google-closure-library prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The safedomtreeprocessor.processToString function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. Recommendation...

GHSA-R9Q4-W3FM-WRM2 Cross-Site Scripting in google-closure-library

Versions of google-closure-library prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The safedomtreeprocessor.processToString function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. Recommendation...

PT-2020-21486

Name of the Vulnerable Software and Affected Versions google-closure-library versions prior to 20190301.0.0 Description The issue concerns improper processing of empty elements by the safedomtreeprocessor.processToString function, which could allow attackers to execute arbitrary JavaScript throug...

WordPress Elegant Testimonial plugin <= 1.1.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by Melbin K Mathew in WordPress Elegant Testimonial plugin versions = 1.1.6. Solution 2021-01-06 - we were unable to find a patched version of this plugin. WordPress.org notification - "This plugin has been closed as of...