WordPress Quiz and Survey Master plugin Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Quiz and Survey Master plugin is a plugin in WordPress. An arbitrary file upload vulnerability exis...

CVE-2020-35951

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...

CVE-2020-35949

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered by uploading a file, only the Content-Type header was checke...

CVE-2020-35951

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...

Buffer overflow

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...

CVE-2020-35949

The CVE-2020-35949 entry concerns the WordPress plugin Quiz and Survey Master before 7.0.1. Affected component: file upload handler in quiz questions. Root cause: only Content-Type is validated during upload, allowing unauthenticated attackers to upload arbitrary files (e.g., .php as text/plain) ...

CVE-2020-35951

An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...

CVE-2020-35951

CVE-2020-35951 affects the WordPress plugin Quiz and Survey Master in versions prior to 7.0.1. The issue is an arbitrary file deletion vulnerability: the function qsm_remove_file_fd_question can delete arbitrary files (e.g., wp-config.php) unauthenticated, potentially taking the site offline and ...

WordPress Quiz and Survey Master plugin security vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the Quiz and Survey Master plugin before 7.0.1 for WordPress that...

WordPress Quiz and Survey Master plugin 安全漏洞

WordPress is a blogging platform developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Quiz and Survey Master plugin is a plugin in WordPress. An arbitrary file upload vulnerability exis...

Command Execution Vulnerability in Yimin Master Deep Capital Edition Client Software

Founded in 2005, Yimin Co., Ltd. provides customers with three major businesses, namely, securities assisted decision-making software, investor education, and investment consulting, and is committed to improving the profitability of its users. Tencent is the second largest shareholder of the...

DLL Hijacking Vulnerability in Yimin Master Gold Nuggets Client Software

Founded in 2005, Yimin Co., Ltd. provides customers with three major businesses, namely, securities assisted decision-making software, investor education, and investment consulting, and is committed to improving the profitability of its users. Tencent is the second largest shareholder of the...

Exploit for Command Injection in Saltstack Salt

CVE-2020-28243 A command injection vulnerability in SaltStack...

Linux TIOCSPGRP Broken Locking

Linux: Broken locking in TIOCSPGRP leads to corrupted tty-pgrp refcount tiocspgrp, the handler for the TIOCSPGRP ioctl, has the following signature: static int tiocspgrpstruct ttystruct tty, struct ttystruct realtty, pidt user p It receives two ttystruct pointers because, for PTY pairs, userspace...

NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...

ASUS RT-AC88U Injection Vulnerability

The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...

PYSEC-2020-141

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...

PYSEC-2020-335

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...