PT-2024-12734

Name of the Vulnerable Software and Affected Versions Pinpoint Booking System versions 2.9.9.3.4 and earlier Description The issue affects the Pinpoint Booking System, allowing for functionality misuse due to an External Control of Assumed-Immutable Web Parameter vulnerability. Recommendations Fo...

CVE-2023-24373

External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3...

CVE-2023-24373 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability

External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3...

Malicious code in random-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02969e3f79ab835099da7fc1ca720e01142e1d7c098b4021ddb45930af85f11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/vero-placeat-ea-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce8c3feba471a4cbe36afc647558994783b5f59eb77754f5f4401e1abf65fcf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/quod-voluptatibus-molestias-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757fcc48a2d8bf16a4025910d6ded04f0aa457e61a0c4b175e318f19d67694f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/reprehenderit-distinctio-eligendi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a9f6cecd2cf176717f4e7156853376de7daa7b8af31cd521dc38bf8e1070f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/quod-expedita-esse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7556e700280a034c9e53944d6b3ea6e9a9f4a53c7b5eab105a122361de6fdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/occaecati-aliquid-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b603de6339dc781efe5676f470ad1e1f8e15edf1ec700583008766718c85f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/nisi-ducimus-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1449df082cd9795e8fc860af980b28b44c5f0c18262c9574f2adf9aeab0092a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/commodi-eius-repudiandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22949271db4d8ac0cd780cfefd377135c5d39d2ee2fff5d2c67f1ded937f2694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1409 Malicious code in @juiggitea/aperiam-facilis-molestias-mollitia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830ae116327023f82a97307586211b0744214fdad67a3897bfbe58f8e49b249b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-12030

Name of the Vulnerable Software and Affected Versions WpDevArt Booking calendar, Appointment Booking System versions 3.2.3 and earlier Description The issue affects the WpDevArt Booking calendar, Appointment Booking System, allowing manipulation of hidden fields due to an External Control of...

Siemens RUGGEDCOM CROSSBOW File Name or Path External Control Vulnerability (CNVD-2024-27530)

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a File Name or Path External Control vulnerability due to an affected system allowing a privileged user to upload generic files to the root installation director...

Siemens RUGGEDCOM CROSSBOW File Name or Path External Control Vulnerability

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a filename or path external control vulnerability due to a bulk import feature on the affected system that allows a privileged user to upload files to the root...

Siemens RUGGEDCOM CROSSBOW File Name or Path External Control Vulnerability (CNVD-2024-27529)

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a filename or path external control vulnerability due to an affected system allowing a privileged user to upload firmware files to the root installation director...

Dell PowerScale OneFS File Name or Path External Control Vulnerability

Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS has an external control of file name or path vulnerability that can be exploited by an attacker to cause a denial of...

CVE-2024-25965

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service...

Siemens RUGGEDCOM CROSSBOW 安全漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a filename or path external control vulnerability due to an affected system allowing a privileged user to upload firmware files to the root installation director...

CVE-2024-25965: External Control of File Name or Path

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service...