WordPress Simple Restrict Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software Simple Restrict Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1083 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 00883e26c04f Credits Francesco Carlucci Required...

PT-2024-13429 · Synology · Photo Station

Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.2 Description: A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and...

PT-2024-25027 · Dassault Systèmes · Edrawings

Name of the Vulnerable Software and Affected Versions: eDrawings versions Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 Description: The issue exists in the file reading procedure, allowing an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file. This cou...

PT-2024-21157 · Unknown · Cd Custom Fields 4 Orders

Name of the Vulnerable Software and Affected Versions: CD Custom Fields 4 Orders version 1.0.0 and earlier Description: A SQL injection issue exists, allowing a guest to perform malicious actions. Recommendations: For versions 1.0.0 and earlier, update to a version later than 1.0.0 to resolve the...

PT-2024-19580 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A critical vulnerability has been found in the boyiddha Automated-Mess-Management-System. The issue is related to an unknown function of the file /member/view.php, where the...

PT-2024-19583 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A problematic vulnerability was found in the Chat Book component of the boyiddha Automated-Mess-Management-System, specifically in the file /member/chat.php. The manipulation ...

PT-2024-18064

Name of the Vulnerable Software and Affected Versions MSI Afterburner version 4.6.5.16370 Description The issue is related to a Kernel Memory Leak vulnerability. It can be triggered by using the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a...

PT-2024-19555 · Unknown · Bdtask G-Prescription Gynaecology & Obs Consultation

Name of the Vulnerable Software and Affected Versions: Bdtask G-Prescription Gynaecology & OBS Consultation Software version 1.0 Description: A vulnerability was found in the Password Reset Handler component, specifically affecting some unknown functionality of the file /Setting/change password...

PT-2024-3377 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8-rc7 Description: The issue is related to a double-free vulnerability in the ns update nuse function, which can lead to a denial of service. When nvme identify ns fails, it frees the pointer to the struct nvm...

PT-2024-15238 · WordPress · Backup/Restore Wordpress – Backup Plugin

Name of the Vulnerable Software and Affected Versions: Backup and Restore WordPress plugin versions 1.45 and earlier Description: The issue allows unauthenticated users to access sensitive information, such as site configuration, by not protecting some log files. This poses a severe threat to...

PT-2024-22141

Name of the Vulnerable Software and Affected Versions RSSHub versions 1.0.0-master.cbbd829 through 1.0.0-master.d8ca915 Description RSSHub is an open source RSS feed generator. When a specially crafted image is supplied to the internal media proxy, it proxies the image without handling XSS...

PT-2024-2266 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical vulnerability was found in the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the arguments schedStartTime and schedEndTime leads to a stack-based buffer...

PT-2024-2047 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS versions 8.x Description: The issue is related to insufficient input validation in the Spectrum service of ArubaOS, which can be exploited by a remote attacker to cause a denial-of-service DoS using the PAPI protocol. Successful...

PT-2024-21357 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools version 0.9.2 Description: The issue is related to a segmentation violation in the compileSWFActionCode function located at swftools/lib/action/actioncompiler.c. This function is part of the swftools library, which is used for...

PT-2024-18744 · Unknown · Libsubextractor.So

Name of the Vulnerable Software and Affected Versions: libsubextractor.so versions prior to SMR Mar-2024 Release 1 Description: The issue is an out of bounds read vulnerability in the ssmis get frm function within libsubextractor.so. This allows local attackers to read out of bounds memory...

PT-2024-18750 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.8.00.3 Description: The issue is related to the improper handling of insufficient privileges, allowing local attackers to access data. This can be exploited by attackers to gain unauthorized access to...

PT-2024-18743 · Unknown · Customfrequencymanagerservice

Name of the Vulnerable Software and Affected Versions: CustomFrequencyManagerService versions prior to SMR Mar-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the CustomFrequencyManagerService. This vulnerability allows local attackers to execute...

PT-2024-2868 · Cdata +1 · Cdata Connect +1

Name of the Vulnerable Software and Affected Versions: CData Connect versions prior to 23.4.8846 Description: A path traversal vulnerability exists in the Java version of CData Connect when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain comple...

PT-2024-18883 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A vulnerability was found in the software, affecting an unknown functionality of the file "/?p=products". The manipulation of the search argument leads to cross-site...

PT-2024-12770 · Multilaser · Multilaser Re160

Name of the Vulnerable Software and Affected Versions: Multilaser RE160 firmware versions 5.07.51 pt MTL01 through 5.07.52 pt MTL01 Description: The issue allows attackers to bypass access control and gain complete access to the application by supplying a crafted cookie. This enables attackers to...