Updates for Skype for Business Server 2019 (KB4470124)

None None...

PT-2023-29172 · Mediavine · Mediavine Control Panel

Name of the Vulnerable Software and Affected Versions: Mediavine Mediavine Control Panel plugin versions = 2.10.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the use...

WordPress Plugin Mediavine Control Panel Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the...

Webinar: How vCISOs Can Navigating the Complex World of AI and LLM Security

In today's rapidly evolving technological landscape, the integration of Artificial Intelligence AI and Large Language Models LLMs has become ubiquitous across various industries. This wave of innovation promises improved efficiency and performance, but lurking beneath the surface are complex...

Improper Access Control

decidim-templates is vulnerable to Improper Access Control. The vulnerability is due to broken access control in the templates module, which results in an attacker being able to manipulate, create, or delete templates of surveys by accessing the administration panel...

eClass Junior 4.0 SQL Injection

==================================================================================================================================== | Title : eClass Junior 4.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...

Security feature bypass

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

CVE-2023-36465 Decidim has broken access control in templates

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

CVE-2023-36465 Decidim has broken access control in templates

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

CVE-2023-36465 Decidim has broken access control in templates

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

CVE-2023-4530

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Turna Advertising Administration Panel allows SQL Injection.This issue affects Advertising Administration Panel: before 1.1...

CVE-2023-4530

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Turna Advertising Administration Panel allows SQL Injection.This issue affects Advertising Administration Panel: before 1.1...

CVE-2023-4530 SQLi in Turna Media's Advertising Administration Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1...

CVE-2023-4530

CVE-2023-4530 affects Turna Advertising Administration Panel prior to 1.1, where an SQL injection vulnerability arises from improper neutralization of special elements in SQL commands. The issue enables potential unauthorized disclosure and manipulation of data, with high impact across confidenti...

Decidim Access Control Error Vulnerability

Decidim is a participatory democracy framework, written in Ruby on Rails. An Access Control Error vulnerability exists in Decidim versions prior to 0.26.8, 0.27.4, and 0.27.4, which stems from the templates module not enforcing the correct permissions, which allows any logged in user to access th...

Turna Advertising Administration Panel SQL Injection Vulnerability

Turna Advertising Administration Panel is an advertising administration panel from Turna. Turna Advertising Administration Panel versions prior to 1.1 are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

PT-2023-29489 · Unknown · Turna Advertising Administration Panel

Name of the Vulnerable Software and Affected Versions: Turna Advertising Administration Panel versions prior to 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

The vulnerability of the dns_zone_editor module of the Control Web Panel (CWP) application, which was previously known as CentOS Web Panel, allows a hacker to execute arbitrary code.

The vulnerability of the dnszoneeditor module of the Control Web Panel formerly CentOS Web Panel relates to the failure to take measures to neutralize special elements. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Control Web Panel formerly CentOS Web Panel web interface relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...