CVE-2024-11839

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11839

CVE-2024-11839 affects PlexTrac, specifically the Runbooks modules, where deserialization of untrusted data enables object injection and arbitrary file writes. Affected versions are PlexTrac 1.61.3 through before 2.8.1. The issue is a server-side deserialization flaw with network exposure and no ...

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1 that stems from an untrustworthy data deserialization vulnerability in the Runbook module, which allows obje...

PT-2024-36154 · Pickplugins · Pickplugins Mail Picker

Name of the Vulnerable Software and Affected Versions: PickPlugins Mail Picker versions 1.0.14 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For PickPlugins Mail Picker versions 1.0.14 and earlier, at the moment...

PT-2024-36163 · Themeum · Wp Mega Menu

Name of the Vulnerable Software and Affected Versions: WP Mega Menu versions 1.4.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Themeum WP Mega Menu. Recommendations: For WP Mega Menu versions 1.4.2 and earlier, update to a...

CVE-2024-12312

The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No...

CVE-2024-12312 Print Science Designer <= 1.3.152 - Unauthenticated PHP Object Injection

The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No...

CVE-2024-12312

CVE-2024-12312 involves the Print Science Designer WordPress plugin. The vulnerability is a PHP Object Injection via deserialization of untrusted input in the designer-saved-projects cookie, affecting all versions up to 1.3.152. It allows unauthenticated attackers to inject a PHP object. The desc...

CVE-2024-12312 Print Science Designer <= 1.3.152 - Unauthenticated PHP Object Injection

The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No...

WordPress Print Science Designer plugin <= 1.3.152 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin Print Science Designer versions = 1.3.152...

PT-2024-17540 · WordPress · Print Science Designer

Name of the Vulnerable Software and Affected Versions: Print Science Designer plugin for WordPress versions up to, and including, 1.3.152 Description: The issue concerns a PHP Object Injection vulnerability in the Print Science Designer plugin for WordPress. This vulnerability arises from the...

WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin ForumWP versions = 2.1.0...

WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Mega Menu versions = 1.4.2...

WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Mail Picker versions = 1.0.14...

Vulnerabilities fixed in Drupal Core

Drupal has fixed vulnerabilities in Drupal Core Specifically for versions 7.0 to 7.102, 8.0.0 to before 10.2.11, 10.3.0 to before 10.3.9, and 11.0.0 to before 11.0.8. The vulnerabilities in Drupal Core are related to privilege escalation and deserialization of untrusted data, which can lead to...

Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Artbitrary File Deletion. It is not directly exploitable. This issue is mitigated by the fact that in order to be exploitable, a separate vulnerability must be present that allo...

GHSA-W6RX-9G2X-MG5G Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...

GHSA-GVF2-2F4G-JQF4 Drupal core contains a potential PHP Object Injection vulnerability

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must be present to...