SourceCodester Road Accident Map Marker 代码注入漏洞

SourceCodester Road Accident Map Marker is a SourceCodester open source road accident map marker project. A code injection vulnerability exists in SourceCodester Road Accident Map Marker version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the markname...

PT-2024-17880 · Sourcecodester · Road Accident Map Marker

Name of the Vulnerable Software and Affected Versions: SourceCodester Road Accident Map Marker version 1.0 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /endpoint/add-mark.php. The manipulation of the mark name/details argument...

CVE-2024-54311

Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through = 7.5.1...

CVE-2024-54311

CVE-2024-54311 is a Missing Authorization vulnerability in the WordPress plugin Mark New Posts . The issue allows exploitation of access control to modify settings via the plugin’s save_options flow, affecting versions up to and including 7.5.1 . The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I...

CVE-2024-54311 WordPress Mark New Posts plugin <= 7.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through = 7.5.1...

PT-2024-36193 · Unknown · Mark New Posts

Name of the Vulnerable Software and Affected Versions: Mark New Posts versions n/a through 7.5.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a through...

CVE-2024-54311: Missing Authorization

Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through = 7.5.1...

WordPress Mark New Posts plugin <= 7.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ngô Thái An Patchstack Alliance in WordPress Plugin Mark New Posts versions = 7.5.1...

AZL-54042 CVE-2024-12254 affecting package python3 for versions less than 3.12.3-5

Starting in Python 3.12.0, the asyncio.SelectorSocketTransport.writelines method would not "pause" writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the "high-water mark". Because of this, Protocols would not periodically drain the write buffer...

UBUNTU-CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

UBUNTU-CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python 3.12.0 and later, which stems from the fact that the...

CVE-2024-6156

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...

DEBIAN-CVE-2024-53130

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint When using the "block:blockdirtybuffer" tracepoint, markbufferdirty may cause a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens...

The vulnerability of the Mark of the Web mechanism in Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the Mark of the Web mechanism in Windows operating systems is related to the breach of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...

PT-2024-8905 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a flaw in the Mark of the Web mechanism of Windows operating systems, which compromises data protection. Exploitation of this flaw could allow a remote attacker to...

CVE-2024-8811

WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2024-8811

WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2024-8811

WinZip CVE-2024-8811 is a Mark-of-the-Web (MOTW) bypass vulnerability in the archive handling path. When opening a MOTW-bearing archive, WinZip strips MOTW from the archive and from extracted files, potentially allowing an attacker to execute arbitrary code in the context of the current user. Exp...

CVE-2024-8811 WinZip Mark-of-the-Web Bypass Vulnerability

WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...