506 matches found
90,000 WordPress Sites Affected by Arbitrary File Upload and Authentication Bypass Vulnerabilities in Jupiter X Core WordPress Plugin
📢 Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with =1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024 , r esearche...
PT-2024-38569 · WordPress · Jupiter X Core
Name of the Vulnerable Software and Affected Versions: Jupiter X Core plugin for WordPress versions up to, and including, 4.6.5 Description: The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the validate function. This make...
PT-2024-38575 · WordPress · Jupiter X Core
Name of the Vulnerable Software and Affected Versions: Jupiter X Core plugin for WordPress versions up to, and including, 4.7.5 Description: The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass due to improper authentication via the Social Login widget. This allows...
MAL-2024-10037 Malicious code in jupiter-helper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3649d8b83ed867b05ae6721bd1158879d8e6a13e0ea9d80c7b6bd9d028dd8738 Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...
Malicious code in jupiter-helper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3649d8b83ed867b05ae6721bd1158879d8e6a13e0ea9d80c7b6bd9d028dd8738 Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...
CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...
CVE-2023-38394 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...
CVE-2023-52738
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fix oops due to non-matching drmsched init/fini Currently amdgpu calls drmschedfini from the fence driver sw fini routine - such function is expected to be called only after the respective init function -...
CVE-2023-38388 WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5...
WordPress Plugin Jupiter X Core 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
jupiter-seo.com Cross Site Scripting vulnerability OBB-3844952
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2024-111 Malicious code in jupiter-emoji-old (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc37009567bfae87c7c7b385a1f4dd20df08e1874e97740c74e15bbea7041516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jupiter-emoji-old (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc37009567bfae87c7c7b385a1f4dd20df08e1874e97740c74e15bbea7041516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-6PQX-V9G4-5HC8 Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
org.jupiter-rpc:jupiter-example (>=1.2.0 <=1.2.7), org.jupiter-rpc:jupiter-extension-tracing (>=1.2.12 <=1.3.1-beta-2) +3 more potentially affected by CVE-2023-48887 via org.jupiter-rpc:jupiter-rpc (>=1.2.0 <=1.3.1)
org.jupiter-rpc:jupiter-rpc MAVEN version =1.2.0, =1.2.0, =1.2.12, =1.2.0, =1.2.0, =1.2.0, =1.3.1-beta-2 Source cves: CVE-2023-48887 Source advisory: OSV:GHSA-6PQX-V9G4-5HC8...
Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48887
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48887
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
