CVE-2019-14328

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

CVE-2019-14328

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

Design/Logic Flaw

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

CVE-2019-14328

The CVE-2019-14328 entry covers a CSRF vulnerability in WordPress Simple Membership plugin up to version 3.8.4, affecting the Bulk Operation feature. Technical details in connected docs show an attacker can abuse CSRF to trigger unintended bulk membership changes by convincing a site administrato...

Simple Membership <= 3.8.4 - Cross-Site Request Forgery (CSRF)

CSRF issue in the Bulk Operation menu tab PoC https://youtu.be/HkTD8DhhwhM https://gofile.io/?c=zWYnLM - CSRF html files...

CVE-2019-3414

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front...

Ke3chang APT Linked to Previously Undocumented Backdoor

The Ke3chang cyberespionage group, a.k.a. APT15, Mirage, Playful Dragon or Vixen Panda, has been tied to a backdoor called Okrum that has been used to target diplomatic missions throughout Europe and Latin America. The attribution widens the scope of known Ke3chang activity, an APT believed to be...

CVE-2019-13915

b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create a symlink, and then place the symlink into a ZIP archive. ...

Simple DirectMedia Layer Buffer Overflow Vulnerability (CNVD-2019-23072)

Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A buffer overflow vulnerability exists in the BlitNtoN file in video/SDLblitN.c in SDL versions 1.2.15 and earlier and versions 2.x throu...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability

Delta Electronics CNCSoft ScreenEditor is a set of CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft ScreenEditor 1.00.89 and prior versions. The vulnerability arises when a networked system or product...

Cellular networks under fire from Soft Cell attacks

We place a lot of trust in our mobile experience, given they’re one of the most constant companions we have. Huge reams of data, tied to a device we always carry with us, with said device frequently offering additional built-in app functionality. An astonishing wealth of information, for anyone...

CVE-2019-12363

An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa&do=deactivate or usercp.php?action=mybb2fa&do=activate. A deactivate operation lowers the...

The vulnerability of the Storage Service component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Storage Service component in Windows operating systems is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the SetJobFileSecurityByName function in the Windows operating system’s task scheduler allows a malicious individual to escalate their privileges.

The vulnerability of the SetJobFileSecurityByName function in the Windows Task Scheduler operating system is related to deficiencies in file operation checks. Exploiting this vulnerability can allow an attacker to increase their privileges...

Foxit PhantomPDF Calculate Memory Misreference Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in the handling of the Calculate operation in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to verify the existence ...

Foxit PhantomPDF Button Calculate Remote Code Execution Vulnerability

Foxit PhantomPDF is a multifunctional PDF editor. A remote code execution vulnerability exists in the handling of Calculate operations in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to validate the existence of an object before performing an operation...

CVE-2019-13309

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c...

CVE-2019-13309

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c...

PT-2019-13245 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-50 Q16 Description: The issue is related to memory leaks due to the mishandling of the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. This occurs at AcquireMagickMemory. Recommendations: For...

CVE-2017-11580

Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...