CVE-2024-12594

creationtimestamp| type| source ---|---|--- 2024-12-24 05:43:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113706203929481650 2024-12-24 06:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa2ubio2i 2024-12-24 07:42:42+00:00| seen|...

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script vulnerability

Missing Authorization to Authenticated Subscriber+ Whitelist Script vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 3.6.5...

SQL Injection

Overview apache-superset is a modern, enterprise-ready business intelligence web application. Affected versions of this package are vulnerable to SQL Injection due to improper handling of certain PostgreSQL functions in the SQL parsing and authorization process. An attacker can execute unauthoriz...

PT-2024-16377

Name of the Vulnerable Software and Affected Versions Pubnews theme for WordPress versions up to, and including, 1.0.7 Description The issue is related to a missing capability check on the pubnews importer plugin action for notice function, allowing authenticated attackers with Subscriber-level...

CVE-2024-12233

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may...

CVE-2024-12233

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may...

CVE-2024-12233 code-projects Online Notice Board Profile Picture registration.php unrestricted upload

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may...

CVE-2024-12233

CVE-2024-12233 affects code-projects Online Notice Board up to version 1.0, targeting the Profile Picture Handler. The flaw arises from processing the img argument in /registration.php, allowing unrestricted file uploads and enabling remote exploitation. Multiple connected sources corroborate a c...

CVE-2024-12233 code-projects Online Notice Board Profile Picture registration.php unrestricted upload

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may...

Code-Projects Online Notice Board System 代码问题漏洞

Code-Projects Online Notice Board System is a Code-Projects open source online bulletin board system. A code issue vulnerability exists in Code-Projects Online Notice Board System prior to version 1.0, which stems from an unrestricted upload of the parameter img...

CVE-2024-12233: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may...

PT-2024-17500 · Unknown · Code-Projects Online Notice Board

Name of the Vulnerable Software and Affected Versions: code-projects Online Notice Board version 1.0 Description: A critical issue affects the processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The...

HAProxy vulnerable to HTTP request/response smuggling

Overview HAProxy HTTP/3 implementation contains an issue on accepting malformed HTTP headers. When a request including malformed HTTP headers is forwarded to a HTTP/1.1 non-compliant back-end server, it is exploited to conduct an HTTP request/response smuggling attack CWE-444. Yuki Mogi of FFRI...

MAL-2024-11075 Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

qiwen-file 安全漏洞

qiwen-file qiwen.com is a distributed file system from qiwen. It aims to provide users and enterprises with a simple and convenient file storage solution that can manage files with a perfect directory structure system. A security vulnerability exists in qiwen-file v1.4.0, which originates from a...

PT-2024-34464 · Unknown · Qiwen-File

Name of the Vulnerable Software and Affected Versions: qiwen-file version 1.4.0 Description: The issue is related to a SQL injection vulnerability. It affects the component /mapper/NoticeMapper.xml. Recommendations: For qiwen-file version 1.4.0, consider restricting access to the...

CVE-2024-52942

creationtimestamp| type| source ---|---|--- 2024-11-18 05:39:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113502347806550409 2024-11-18 08:11:02+00:00| seen| https://t.me/cvedetector/11287 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1661/...

Malicious code in newbharatv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bccffdbbaea730330c6b6156aac69a4852d53debfa863456e47b3d3cb0c53561 The OpenSSF Package Analysis project identified 'newbharatv2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Fedora 37 : pgadmin4 (2022-2d5a6f48e1)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2d5a6f48e1 advisory. Fix compatibility with newer python-azure-mgmt-rdbms. ---- Update to pgadmin4-6.17, see https://www.pgadmin.org/docs/pgadmin4/development/releasenotes617.htm...

CVE-2024-10943

creationtimestamp| type| source ---|---|--- 2024-11-12 17:01:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113471054051069316 2024-11-12 18:53:59+00:00| seen| https://t.me/cvedetector/10673 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...