Command Injection

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Command Injection due to the PHP registerargcargv configuration setting. An attacker can execute arbitrary code by manipulating the command line arguments. Note: This is only exploitable if t...

kernel: stm class: Fix a double free in stm_register_device()

A vulnerability was found in the Linux kernel's stm class, where an improper memory management sequence in stmregisterdevice could lead to a double-free error. This issue occurs when the putdevice&stm-dev call triggers stmdevicerelease to free "stm", making the subsequent vfreestm call redundant...

WordPress plugin Peter’s Custom Anti-Spam 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Craft CMS 代码注入漏洞

Craft CMS is a user-friendly, web-based content management system for creating and managing website content. Craft CMS has a security vulnerability due to the opening of registerargcargv in the PHP configuration, which can be exploited by an attacker to execute arbitrary code and take control of...

WordPress Peter’s Custom Anti-Spam plugin <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function vulnerability

Cross-Site Request Forgery via casregisterpost Function vulnerability discovered by SOPROBRO in WordPress Plugin Peter’s Custom Anti-Spam versions = 3.2.3...

CVE-2024-54363

Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...

WordPress plugin Wp NssUser Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-36249 · WordPress · Wp Nssuser Register

Name of the Vulnerable Software and Affected Versions: Wp NssUser Register versions n/a through 1.0.0 Description: The issue is related to an incorrect privilege assignment in the nssTheme Wp NssUser Register, allowing privilege escalation. Recommendations: For versions n/a through 1.0.0, at the...

WordPress plugin MainWP Child 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

arm64: probes: Remove broken LDR (literal) uprobe support

...

x86/entry_32: Clear CPU buffers after register restore in NMI return

...

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

...

WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Wp NssUser Register versions = 1.0.0...

CVE-2024-52391

Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

CVE-2024-53822

Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

CVE-2024-52391

CVE-2024-52391 — WordPress Pie Register Premium plugin suffers a Missing/Broken Authorization vulnerability in versions prior to 3.8.3.3 (Pie Register Premium). The issue is described as Broken Access Control with unauthenticated access possible. Patch information from Patchstack indicates the vu...

CVE-2024-52391 WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

CVE-2024-53822

CVE-2024-53822 affects the Pie Register Premium WordPress plugin (Genetech) prior to version 3.8.3.3. Vulnerability: Unrestricted Upload of File with Dangerous Type. Impact noted as high (CVSS v3.1 base score 10.0; confidentiality, integrity, and availability impacts High). Remediation: upgrade t...

CVE-2024-53822 WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

WordPress plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin WordPre...