PT-2024-39009 · WordPress · Webba Booking

Name of the Vulnerable Software and Affected Versions: The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress versions up to, and including, 5.0.48 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify the booking form...

CVE-2024-9082

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save of the component User Creation Handler. The manipulation of the argument Type with the input 1 leads to...

CVE-2024-9082 SourceCodester Online Eyewear Shop User Creation Users.php improper authorization

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save of the component User Creation Handler. The manipulation of the argument Type with the input 1 leads to...

PT-2024-39416

Name of the Vulnerable Software and Affected Versions SourceCodester Online Eyewear Shop version 1.0 Description A critical issue affects some unknown functionality of the file /Users.phpf=save of the component User Creation Handler. The manipulation of the type argument with the input 1 leads to...

CVE-2024-9033

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savecategory. The manipulation of the argument name leads to cross site scripting. The...

SourceCodester Best House Rental Management System 跨站脚本漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from a cross-site scripting vulnerability in the name paramet...

PT-2024-27805 · Usvn · Usvn

Name of the Vulnerable Software and Affected Versions: User-friendly SVN USVN versions prior to 1.0.12 Description: The issue is related to improper input validation in the /admin/config/save endpoint, allowing administrators to execute arbitrary code via the fields siteTitle, siteIco, and...

CVE-2024-37879

Improper input validation in /admin/config/save in User-friendly SVN USVN before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo"...

CVE-2024-46377

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the savesettings function of the file rental/adminclass.php...

CVE-2024-46594

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46377

CVE-2024-46377 affects Best House Rental Management System 1.0. The vulnerability is an arbitrary file upload in the save_settings() function of rental/admin_class.php. Public sources (Red Hat advisory, CVE records, CNNVD, CVEList, and a GitHub exploit PoC) confirm an unrestricted upload path tha...

PT-2024-9707 · Draytek · Draytek Vigor

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor version 4.3.2.6 Description: The issue is related to a buffer overflow in the saveVPNProfile parameter at the "v2x00.cgi" API endpoint. This can be exploited by a remote attacker to cause a Denial of Service DoS via a crafted...

WordPress PropertyHive plugin <= 2.0.19 - Cross-Site Request Forgery via save_account_details vulnerability

Cross-Site Request Forgery via saveaccountdetails vulnerability discovered by wesley wcraft in WordPress Plugin PropertyHive versions = 2.0.19...

CodeCanyon RISE Ultimate Project Manager SQL注入漏洞

CodeCanyon RISE Ultimate Project Manager is a project management and CRM software from CodeCanyon Corporation. A SQL injection vulnerability exists in CodeCanyon RISE Ultimate Project Manager version 3.7.0, which stems from the parameter id of the file /index.php/dashboard/save that can lead to S...

PT-2024-30167 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: The issue is related to Incorrect Access Control. It can be found in the /music/ajax.php endpoint, specifically when the action parameter is set to save user. This allows for...

CVE-2024-46680

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...

DEBIAN-CVE-2024-46680

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...

UBUNTU-CVE-2024-46680

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...

CVE-2024-46680

In CVE-2024-46680, the Linux kernel Bluetooth btnxpuart driver can crash when the driver is removed because ps_wakeup() schedules work after module removal. The fix introduces ps_cleanup() to deassert UART break immediately on serdev close, cancel any scheduled work, and destroy the ps_lock mutex...

CVE-2024-46680 Bluetooth: btnxpuart: Fix random crash seen while removing driver

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...