CVE-2024-11681 Remote Code Execution in MacPorts

A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror...

CVE-2024-11681

CVE-2024-11681 describes remote code execution in MacPorts where a malicious or compromised MacPorts mirror can run arbitrary commands as root on a client machine when performing a selfupdate against the mirror. The issue is tied to the port selfupdate process trusting the mirror, with multiple s...

CVE-2024-11681: Improper Neutralization of Special Elements used in an OS Command

A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror...

PT-2025-1678 · Macports · Macports

Name of the Vulnerable Software and Affected Versions: MacPorts affected versions not specified Description: A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror. Recommendations: At the moment, the...

Unauthorized Access Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP Massively Parallel Processing database . There is an unauthorized access vulnerability in the StarRocks database system of Beijing Mirror Boat Technology Co. Ltd, which can be exploited by attackers to obta...

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co., Ltd StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co. StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

I transformed my English-language site avleonov.com

I transformed my English-language siteavleonov.com. While my Russian-language site avleonov.ru was intended as a mirror of my Telegram channel @avleonovrus, I wasn't sure how to move forward with the English-language site. I've been running it since 2016. For a long time, it was my main VM blog...

CVE-2024-51621

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...

CVE-2024-51621

CVE-2024-51621 describes an SQL Injection in the WordPress plugin Download-Mirror-Counter (versions

CVE-2024-51621 WordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...

CVE-2024-51621 WordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...

WordPress plugin Download-Mirror-Counter SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

PT-2024-34765 · Unknown · Reza Sh Download-Mirror-Counter

Name of the Vulnerable Software and Affected Versions: Reza Sh Download-Mirror-Counter versions 1.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2024-51621: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reza19 Download-Mirror-Counter wp-download-mirror-counter allows SQL Injection.This issue affects Download-Mirror-Counter: from n/a through = 1.1...

WordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Download-Mirror-Counter versions = 1.1...

CVE-2024-5435

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration...

UBUNTU-CVE-2024-5435

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration...

CVE-2024-5435

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration...

CVE-2024-5435 Generation of Error Message Containing Sensitive Information in GitLab

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration...