CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49208

CVE-2024-49208 affects Archer Platform 2024.03 (before 2024.08). The vulnerability is an authorization bypass related to supporting application files, enabling a remote unprivileged attacker to potentially elevate privileges and delete system icons. The issue is confirmed across multiple feeds, i...

CVE-2024-49209

CVE-2024-49209 affects Archer Platform 2024.03 through 2024.08. The vulnerability is an API authorization bypass related to supporting application files, allowing a remote unprivileged attacker to elevate privileges and upload additional system icons. Remediation: upgrade to Archer Platform 2024....

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

PT-2024-33347 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.08 Description: The issue is related to an API authorization bypass vulnerability, specifically concerning the support for application files. This could allow a remote unprivileged attacker to...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09 that stems from being affected by an authorization bypass vulnerability that could be exploited by a remote, unprivileged attacker to...

PT-2024-33346 · Unknown · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.07 Description: The issue is related to an authorization bypass vulnerability concerning supporting application files. A remote unprivileged attacker could potentially exploit this to elevate thei...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.08 that stems from being affected by an authorization bypass vulnerability, which could be exploited by a remote, unprivileged attacker to...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Custom Icons for Elementor versions = 0.3.3...

Malicious code in icons-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6feb667d94af8b321bf6e17105871a33d8a51d84d251eee974185efad1030c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9661 Malicious code in icons-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6feb667d94af8b321bf6e17105871a33d8a51d84d251eee974185efad1030c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9523 Malicious code in bnppf-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f2ac07d2b638b2c5e858c36b6c48bcecc7c2bc4c51b99f419f06c2cd5c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bnppf-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f2ac07d2b638b2c5e858c36b6c48bcecc7c2bc4c51b99f419f06c2cd5c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf The OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 npm as malicious. It is considered malicious because: - The package...