WordPress Pie Register elevation of privilege vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to host websites on servers that support PHP and MySQL databases, or as a content management system CMS. an elevation of privilege vulnerability exists in WordPress Pie Register. An attacker could exploit this...

WordPress Pie Register 3.7.1.4 Plugin - Admin Privilege Escalation Vulnerability

Exploit Title: WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation Unauthenticated Google Dork: inurl:/plugins/pie-register/ Exploit Author: Lotfi13-DZ Vendor Homepage: https://wordpress.org/plugins/pie-register/ Software Link:...

WordPress Pie Register 3.7.1.4 Privilege Escalation

Exploit Title: WordPress Plugin Pie Register 3.7.1.4 - Admin Privilege Escalation Unauthenticated Google Dork: inurl:/plugins/pie-register/ Date: 08.10.2021 Exploit Author: Lotfi13-DZ Vendor Homepage: https://wordpress.org/plugins/pie-register/ Software Link:...

WordPress Plugin Pie Register Auth Bypass to RCE

This module uses an authentication bypass vulnerability in Wordpress Plugin Pie Register use exploit/unix/webapp/wp/pieregisterbypassrce msf undefinedpieregisterbypassrce show actions ...actions... msf undefinedpieregisterbypassrce set ACTION msf undefinedpieregisterbypassrce show options ...show...

SUSE: Security Advisory (SUSE-SU-2018:0386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-25082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.41 Description The issue is related to an out-of-bounds OOB access in the traffic path of the fq pie component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-25038

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.8 Description The issue is related to an out-of-bounds OOB access in the traffic path of the fq pie component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-29076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.41 Description The issue is related to an out-of-bounds OOB access in the traffic path of the fq pie component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2021-29032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.8 Description The issue is related to an out-of-bounds OOB access in the traffic path of the fq pie component in the Linux Kernel's net/sched module. The actual impact and attack plausibility have not y...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1826-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

openSUSE Security Update : dtc (openSUSE-2021-746)

This update for dtc fixes the following issues : - make all packaged binaries PIE-executables bsc1184122. This update was imported from the SUSE:SLE-15-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

PT-2021-27347

Name of the Vulnerable Software and Affected Versions: dtc affected versions not specified Description: The issue with dtc involves making all packaged binaries PIE-executables. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

Security update for dtc (low)

openSUSE Security Update: Security update for dtc Announcement ID: openSUSE-SU-2021:0746-1 Rating: low References: 1184122 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for dtc fixes the following issues: - make all...

PT-2021-28431

Name of the Vulnerable Software and Affected Versions: dtc affected versions not specified Description: The issue involves making all packaged binaries PIE-executables. No information is provided about the estimated number of potentially affected devices worldwide or details about real-world...

Sifchain: Linux Desktop application "sifnoded" executable does not use Pie / no ASLR

Hello Sifchain, sifnoded binary from the Linux application is no position independent executable PoC; $file sifnoded Output will be like ; ███████ Position independent executables are required for full ASLR support on Linux. Non-pie-binaries are loaded to a fixed location, thus allowing ROP...

Security update for libdwarf (low)

openSUSE Security Update: Security update for libdwarf Announcement ID: openSUSE-SU-2021:0619-1 Rating: low References: 1185057 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for libdwarf fixes the following issues: -...

OPENSUSE-SU-2021:0619-1 Security update for libdwarf

This update for libdwarf fixes the following issues: - Hardening: Link /usr/bin/dwarfdump as PIE bsc1185057. This update was imported from the SUSE:SLE-15:Update update project...

PT-2021-27342

Name of the Vulnerable Software and Affected Versions: libdwarf affected versions not specified Description: The issue with libdwarf involves a hardening update to link /usr/bin/dwarfdump as PIE. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2021-24239

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...