Malicious code in es7.object.get-own-property-descriptors (npm)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2024-34030

In the Linux kernel, the following vulnerability has been resolved: PCI: ofproperty: Return error for intmap allocation failure Return -ENOMEM from ofpcipropintrmap if kcalloc fails to prevent a NULL pointer dereference in this case. bhelgaas: commit log...

CVE-2024-6042

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-6042

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-6042: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

PT-2024-37339 · Unknown · Itsourcecode Real Estate Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Real Estate Management System version 1.0 Description: A critical issue has been found in the itsourcecode Real Estate Management System, affecting some unknown functionality of the file property-detail.php. The manipulation of t...

itsourcecode Real Estate Management System SQL Injection Vulnerability

Real Estate Management System is an open source real estate management system from Itsourcecode. SQL injection vulnerability exists in itsourcecode Real Estate Management System version 1.0, the vulnerability stems from property-detail.php contains some unknown functions, which can cause SQL...

commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

A vulnerability was found in Apache Commons-Configuration2, where a Stack Overflow Error can occur when adding a property in AbstractListDelimiterHandler.flattenIterator. This issue could allow an attacker to corrupt memory or execute a denial of service attack by crafting malicious property that...

CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-32799

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3...

CVE-2024-32799

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3...

CVE-2024-32799 WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3...

CVE-2024-32799

CVE-2024-32799 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Easy Property Listings by Merv Barrett, affecting versions up to and including 3.5.3. The NVD data shows a high impact (Confidentiality, Integrity, Availability all High) with CVSS v3.1 base sc...

CVE-2024-32799 WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3...

WordPress plugin Easy Property Listings security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-24872 · Merv Barrett · Easy Property Listings

Name of the Vulnerable Software and Affected Versions: Easy Property Listings versions 3.5.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in Merv Barrett Easy Property Listings. Recommendations: For versions 3.5.3 and earlier, update to a version later th...

CVE-2024-32799: Missing Authorization

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3...

CVE-2024-35701

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PropertyHive allows Stored XSS.This issue affects PropertyHive: from n/a through 2.0.13...

The Justice Department Took Down the 911 S5 Botnet

The US Justice Department has dismantled an enormous botnet: According to an indictment unsealed on May 24, from 2014 through July 2022, Wang and others are alleged to have created and disseminated malware to compromise and amass a network of millions of residential Windows computers worldwide...

Flow Bugfix Releases for Entity Security

If you had used entity security and wanted to secure entities not just based on the user's role, but on some property of the user like the company he belongs to, entity security did not work properly together with the doctrine query cache. This could lead to other users re-using SQL queries from...