PT-2025-21396 · WordPress · Applyonline

Name of the Vulnerable Software and Affected Versions: ApplyOnline WordPress plugin versions prior to 2.6.3 Description: The issue concerns the ApplyOnline WordPress plugin, which fails to protect files uploaded during the application process. This allows unauthenticated users to access these fil...

CVE-2025-3923

The CVE-2025-3923 entry describes a vulnerability in the WordPress plugin Prevent Direct Access – Protect WordPress Files for WordPress, affecting all versions up to 2.8.8. The issue is Sensitive Information Exposure caused by insufficient randomness in the generate_unique_string function, enabli...

Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

GO-2025-3372 Vulnerability when creating log files in github.com/golang/glog

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

IOBit Protected Folder 安全漏洞

IOBit Protected Folder is a file protection tool from IOBit Inc. It is used to secure important folders, data and privacy. A security vulnerability exists in IOBit Protected Folder version 13.6.0.5 and earlier versions, which stems from a null pointer dereference...

SUSE CVE-2024-45026

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ESE or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasdeseneedsformat function checks for...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2024-1574

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in the licensing feature of Mitsubishi Electric GENESIS64 versions 10.97.2 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 and prior, Mitsubishi Electric Hyper Historian versions 10.97.2 a...

CVE-2023-6409

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert...

CVE-2022-20515

CVE-2022-20515 affects Android 13 in the Settings app, via onPreferenceClick in AccountTypePreferenceLoader.java. The issue stems from a confused deputy, enabling local information disclosure with no extra privileges and no user interaction required. Impact is described as protected-files leakage...

7-Zip gets Mark of the Web feature, increases protection for users

One of the most popular zip programs around, 7-Zip, now offers support for "Mark of the Web" MOTW, which gives users better protection from malicious files. This is good news. But what does that actually mean? In the bad old days, opening up a downloaded document could be a fraught exercise...

How to Password Protect Any File

Put a digital lock on your most important data...

WordPress Counter Box plugin local file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Counter Box plugin is vulnerable to a local file inclusion vulnerability that stems from a lack of...

ownCloud: Theft of protected files on Android

There is an issue that allows to retrieve any files from protected directory of application - /data/data/com.owncloud.android/. The issue is caused by exported activity com.owncloud.android.ui.activity.ReceiveExternalFilesActivity with intent filter android.intent.action.SENDMULTIPLE that accepts...

Design/Logic Flaw

Trend Micro Security 2021 v17.0 Consumer contains a vulnerability that allows files inside the protected folder to be modified without any detection...

CVE-2021-43564

The CVE-2021-43564 entry concerns the TYPO3 extension Job Fair (hov/jobfair). The vulnerability arises because the extension does not protect or obfuscate uploaded filenames, enabling an unauthenticated user to access sensitive data by guessing the filename (e.g., uploads/tx_jobfair/cv.pdf). Affe...

SQL Injection Vulnerability in Tianrongxin Webpage Tampering Prevention System

Web anti-tampering system is a protection product specially researched and developed for website tampering attacks. The main function of the system is to provide all-around protection for the Web site directory through the underlying file driving technology, preventing hackers, viruses and other...

The vulnerability of the McAfee File and Removable Media Protection software lies in the absence of quotation marks in the syntax of certain elements or search paths. This allows attackers to exploit their privileges or execute arbitrary code.

The vulnerability of the McAfee File and Removable Media Protection software lies in the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

McAfee File and Removable Media Protection (FRP) Installed (Windows)

Binary data mcafeefrpinstalled.nbin...

McAfee File and Removable Media Protection < 5.3.0.143 Arbitrary Code Execution Vulnerability (SB10330)

The version of McAfee File and Removable Media Protection installed on the remote host is prior to 5.3.0.143. It is, therefore, affected by an arbitrary code execution vulnerability which allows local users to execute arbitrary code, with higher privileges. C Tenable Network Security, Inc...