4475 matches found
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2...
CVE-2023-31215
CVE-2023-31215 arises from an Unrestricted Upload of File with Dangerous Type in the WordPress plugin Dropshipping & Affiliation with Amazon (WP Amazon Shop) for versions
CVE-2023-31215 WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2...
GitHub Security Lab (GHSL) Vulnerability Report: Arbitary write GHSL-2023-182
Impact Issue: Arbitrary file write in file.py GHSL-2023-183 Patches Use mindsdb staging branch or v23.11.4.1...
Exploit for Injection in Vm2_Project Vm2
CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerabili...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2023-46604 Lab This lab guides on exploiting vulnerabiliti...
OctoberCMS v3.4.0 (Category) Stored Cross-Site Scripting Vulnerability
Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...
OctoberCMS v3.4.0 (About) Stored Cross-Site Scripting Vulnerability
Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...
OctoberCMS v3.4.0 (Blog) Stored Cross-Site Scripting Vulnerabilities
Summary OctoberCMS is a self-hosted content management system CMS based on the PHP programming language and Laravel web application framework. It supports MySQL, SQLite and PostgreSQL for the database back end and uses a flat file database for the front end structure. The October CMS covers a ran...
GHSA-F678-J579-4XF5 Apache Superset - Elevation of Privilege
Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...
TitanNit Web Control 2.01 / Atemio 7600 Root Remote Code Execution
Summary The Atemio AM 520 HD Full HD satellite receiver enables the reception of digital satellite programs in overwhelming image quality in both SD and HD ranges. In addition to numerous connections, the small all-rounder offers a variety of plugins that can be easily installed thanks to the lar...
Hackers Leak Thousands of Idaho National Lab Employees’ PII Data
By Waqas SiegedSec is the group responsible for the data breach at the Idaho National Laboratory INL. This is a post from HackRead.com Read the original post: Hackers Leak Thousands of Idaho National Lab Employees PII Data...
[slackware-security] vim
New vim packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.2127-i586-1slack15.0.txz: Upgraded. Fixed security issues. Thanks to marav for the heads-up. For more information, see:...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-115.5.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mor...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.5.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. Thanks to...
Exploit for Incorrect Comparison in Dynamic-Linq Linq
Dynamic Linq injection to RCE - CVE-2023-32571 About Dynami...
Intel® OFU Software Advisory
Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...