CVE-2023-41805

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5...

CVE-2023-41805 Broken Access Control vulnerability in multiple Brainstorm Force plugins

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5...

CVE-2023-41805 Broken Access Control vulnerability in multiple Brainstorm Force plugins

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5...

WordPress plugin Starter Templates security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-12978 · Brainstorm Force · Brainstorm Force Premium Starter Templates +1

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Premium Starter Templates versions 3.2.5 and earlier Brainstorm Force Starter Templates versions 3.2.5 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects...

CVE-2023-41805: Missing Authorization

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5...

CVE-2024-6056

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

CVE-2024-6056

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

CVE-2024-6056

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

CVE-2024-6056 nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

CVE-2024-6056

CVE-2024-6056 affects nasirkhan Laravel Starter up to 11.8.0, targeting the Password Reset Handler’s /forgot-password endpoint. The issue arises from manipulating the Email parameter, producing observable response discrepancies. Attack may be launched remotely; the CVE notes high complexity and d...

PT-2024-37350 · Unknown · Nasirkhan Laravel Starter

Name of the Vulnerable Software and Affected Versions: nasirkhan Laravel Starter versions up to 11.8.0 Description: A vulnerability was found in the Password Reset Handler component, specifically affecting some unknown functionality of the file /forgot-password. The manipulation of the Email...

CVE-2024-6056: Observable Response Discrepancy

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response...

Laravel Starter Security Vulnerability

Laravel Starter is a simple starter project based on Laravel 11.x by Nasir Khan Saikat individual developer. A security vulnerability exists in Laravel Starter version 11.8.0 and earlier versions, which stems from an incorrect manipulation of the parameter Email that results in response...

This Week in Spring - June 11th, 2024

This Week in Spring - June 10th, 2024 Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in Paris, France, to talk to organizations using and working with Spring. Then, next week, it's off to Krakow, Poland, for the amazing Devoxx PL event! I can't wait. If you're around,...

CVE-2024-5222: Improper Neutralization of Input During Web Page Generation

The Responsive Addons – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, 3.0.5 due to insufficient input sanitization and output...

PT-2024-40277 · Silverstripe · Silverstripe 4 +4

Name of the Vulnerable Software and Affected Versions: silverstripe/comments module affected versions not specified cwp/starter-theme affected versions not specified cwp/watea-theme affected versions not specified SilverStripe 4 versions prior to 4.2.0 CWP versions prior to 2.0.0 Description: The...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (>=10.0.0, <=10.1.0)

org.bonitasoft.engine:bonita-server MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-28087 Source advisory: OSV:GHSA-76V2-48W6-CRXR...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.0), org.bonitasoft.engine:bonita-engine-standalone (7.9.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.2), org.bonitasoft.engine:bonita-engine-standalone (7.9.2) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.2)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.2 -...