7773 matches found
kernel: stm class: Fix a double free in stm_register_device()
A vulnerability was found in the Linux kernel's stm class, where an improper memory management sequence in stmregisterdevice could lead to a double-free error. This issue occurs when the putdevice&stm-dev call triggers stmdevicerelease to free "stm", making the subsequent vfreestm call redundant...
PT-2024-17651
Name of the Vulnerable Software and Affected Versions Peter’s Custom Anti-Spam plugin for WordPress versions up to, and including, 3.2.3 Description The issue is due to missing nonce validation on the cas register post function, making it possible for unauthenticated attackers to blacklist emails...
Craft CMS code injection vulnerability
Craft CMS is a user-friendly, web-based content management system for creating and managing website content. Craft CMS has a security vulnerability due to the opening of registerargcargv in the PHP configuration, which can be exploited by an attacker to execute arbitrary code and take control of...
WordPress plugin Peter’s Custom Anti-Spam has a cross-site request forgeing vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2025-3639
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-06316-g7f63786ad3d1-dirty Description The issue is related to a NULL pointer dereference in the tcpci irq function when handling shared interrupts. This can occur when two Type-C ports share an...
WordPress Peter’s Custom Anti-Spam plugin <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function vulnerability
Cross-Site Request Forgery via casregisterpost Function vulnerability discovered by SOPROBRO in WordPress Plugin Peter’s Custom Anti-Spam versions = 3.2.3...
CVE-2024-54363
Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...
CVE-2024-54363: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...
PT-2024-36249 · WordPress · Wp Nssuser Register
Name of the Vulnerable Software and Affected Versions: Wp NssUser Register versions n/a through 1.0.0 Description: The issue is related to an incorrect privilege assignment in the nssTheme Wp NssUser Register, allowing privilege escalation. Recommendations: For versions n/a through 1.0.0, at the...
WordPress plugin Wp NssUser Register has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin MainWP Child has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2024-16542
Name of the Vulnerable Software and Affected Versions MainWP Child plugin versions prior to 5.3 Description The MainWP Child plugin for WordPress is vulnerable to privilege escalation due to a missing authorization check on the register site function when a site is left in an unconfigured state...
KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
...
x86/entry_32: Clear CPU buffers after register restore in NMI return
...
arm64: probes: Remove broken LDR (literal) uprobe support
...
CVE-2024-53274: Improper Neutralization of Input During Web Page Generation
Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The register function in home.vue containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious redirectTo parameter...
WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Wp NssUser Register versions = 1.0.0...
PT-2024-35707
Name of the Vulnerable Software and Affected Versions Habitica versions prior to 5.28.5 Description Habitica is an open-source habit-building program. The issue arises from a reflected cross-site scripting vulnerability in the register function in home.vue, caused by an incorrect sanitization...