WordPress Soledad theme <= 8.5.9 - Unauthenticated Limited Local File Inclusion vulnerability

Unauthenticated Limited Local File Inclusion vulnerability discovered by Foxyyy in WordPress Theme Soledad versions = 8.5.9...

PT-2024-35922 · Unknown · Basix Nex-Forms

Name of the Vulnerable Software and Affected Versions: Basix NEX-Forms – Ultimate Form Builder versions prior to 8.7.9 Description: The issue is related to the improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for malicious SQL commands...

Planet WGS-804HPT 安全漏洞

Planet WGS-804HPT is an industrial 8-port 10/100/1000T wall-mounted managed switch from Planet, China. A security vulnerability exists in the Planet WGS-804HPT. An attacker can exploit this vulnerability to remotely execute code by sending commands via malicious HTTP requests...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V8 files...

PT-2024-35909 · Unknown · Andy Moyle Church Admin

Name of the Vulnerable Software and Affected Versions: Andy Moyle Church Admin versions 5.0.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 5.0.8 and...

The vulnerability of the V-Simulator 5 component of the monitoring software for Fuji Electric Tellus Lite V-Simulator allows a intruder to execute arbitrary code.

The vulnerability of the V-Simulator 5 component of the monitoring software for the Fuji Electric Tellus Lite V-Simulator relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially...

Malicious Embedded Code

Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Malicious Embedded Code. These versions have been compromised to install an xmrig...

Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u432 icedtea-3.33.0: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete access to some of Oracle Java SE accessible data...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 9.7.x through 9.7.5, 9.8.x through 9.8.2, and 9.9.x through 9.9.2, which stems from an inability to properly propagate privilege scheme updates...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8 files...

CVE-2024-40744

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8...

KMQTT 安全漏洞

KMQTT is a Kotlin multi-platform MQTT 3.1.1/5.0 client and proxy from the individual developer Davide Pianca. A security vulnerability exists in KMQTT version v0.4.8 that stems from allowing an attacker to cause a denial of service via a crafted request...

Joomla! 安全漏洞

Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! versions prior to 4.4.8. An attacker exploiting this vulnerability could execute a cross-site scripting attack...

CVE-2024-53502

Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMSSeoAndTag.php page...

WordPress NPS computy plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin NPS computy versions = 2.8.0...

CVE-2024-11782

The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mstsubscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-of-Bounds Write Code Execution Vulnerability

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments developed by Fuji Electric Japan for collecting real-time data from PLCs, temperature controllers, inverters, and other devices. Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-of-Bounds...

Security update for php8

This update for php8 fixes the following issues: CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter bsc1233702. CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs bsc1233703. CVE-2024-8929: Leak partial content of the heap...

WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by trongnb02 Patchstack Alliance in WordPress Plugin NEX-Forms versions = 8.7.8...

WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Church Admin versions = 5.0.8...