PT-2024-31525 · Sayful Islam · Carousel Slider

Name of the Vulnerable Software and Affected Versions: WordPress plugin Carousel Slider affected versions not specified Description: The WordPress plugin Carousel Slider provided by Sayful Islam contains a cross-site request forgery issue on the Hero image selection feature. When a user is logged...

PT-2024-32200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5 Description The vulnerability is related to the userfaultfd feature in the Linux kernel, specifically with the pmd trans huge code in mfill atomic. The issue arises from a racy check that can lead to a BUG ON...

CVE-2024-43132

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPWeb Elite Docket WooCommerce Collections / Wishlist / Watchlist allows SQL Injection.This issue affects Docket WooCommerce Collections / Wishlist / Watchlist: from n/a before 1.7.0...

Arbitrary Code Execution

JupyterLab is vulnerable to Arbitrary Code Execution. The vulnerability is due to user interaction with a malicious notebook or Markdown file using JupyterLab's preview feature, which allows execution of arbitrary code and unauthorized data access...

CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

JupyterLab 安全漏洞

JupyterLab is a JupyterLab open source extensible environment for interactive and repeatable computation, based on the Jupyter Notebook and architecture. A security vulnerability exists in JupyterLab that originates from opening a malicious notebook or Markdown file with Markdown cells using the...

Adobe Experience Manager Input Validation Error Vulnerability (CNVD-2024-37805)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

Sensitive Information Disclosure

openstack-heat is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the stack abandon command with the hidden feature set to True by which an attacker can disclose sensitive information...

PT-2024-5807 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 4.4.2 Moodle versions prior to 4.3.6 Moodle versions prior to 4.2.9 Moodle versions prior to 4.1.12 Description: A flaw was found in Moodle, allowing remote code execution due to incomplete sanitization in the...

CVE-2024-43890

CVE-2024-43890: Linux kernel tracing overflow in get_free_elt() is fixed. The issue was that tracing_map->next_elt could overflow beyond tracing_map->max_elt, allowing insertion into a full tracing_map and potentially causing an infinite loop with preemption disabled, leading to a CPU hang....

CVE-2024-8158

A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any other valid filesystem user. This is due to lib9p not properly verifying that the uname given in the Tauth and Tattach 9p messages matches...

CVE-2024-41849

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue...

CVE-2024-41849

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue...

CVE-2024-41849

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that can bypass a security feature and slightly affect page integrity. Exploitation requires user interaction and low privileges, with network-style exposure (per the CVE entry and related...

CVE-2024-41849 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue...

CVE-2024-41849 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue...

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining

Cybersecurity researchers have unpacked a new malware strain dubbed PGMEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL database instances. "Brute-force attacks on Postgres involve repeatedly attempting to guess the database credentials until access is gaine...

PT-2024-12486 · Mobotix · Mx6 Cameras +1

Name of the Vulnerable Software and Affected Versions: MOBOTIX P3 cameras versions prior to MX-V4.7.2.18 MOBOTIX Mx6 cameras versions prior to MX-V5.2.0.61 Description: The issue concerns the tcpdump feature, which does not properly validate input. This allows authenticated users to execute code...

CVE-2023-52905

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix resource leakage in VF driver unbind resources allocated like mcam entries to support the Ntuple feature and hash tables for the tc feature are not getting freed in driver unbind. This patch fixes the issue...