3798 matches found
PT-2024-34692 · Unknown · Super Home Screen Module
Name of the Vulnerable Software and Affected Versions: Super Home Screen module affected versions not specified Description: The issue concerns improper log printing in the Super Home Screen module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the...
CVE-2024-51528: Insertion of Sensitive Information into Log File
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2024-39959
Name of the Vulnerable Software and Affected Versions Super Socializer plugin for WordPress versions up to, and including, 7.13.68 Description The issue is due to insufficient verification on the user being returned by the social login token, making it possible for unauthenticated attackers to lo...
WordPress Super Socializer Plugin <= 7.13.68 is vulnerable to Broken Authentication
Software Super Socializer Type Plugin Vulnerable versions = 7.13.68 Fixed in 7.14 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9946 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 3feff8ece72e Credits wesle...
5 SaaS Misconfigurations Leading to Major Fu*%@ Ups
With so many SaaS applications, a range of configuration options, API capabilities, endless integrations, and app-to-app connections, the SaaS risk possibilities are endless. Critical organizational assets and data are at risk from malicious actors, data breaches, and insider threats, which pose...
CVE-2024-48910
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2...
WordPress Super Addons for Elementor Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Super Addons for Elementor Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51588 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c260921bb488 Credits Gab Required privilege...
kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
A vulnerability was found in the Linux kernel's ext4 filesystem within the ext4fillsuper function, where uninitialized access to ratelimitstate-lock can occur, where the sysfs interface is registered before properly initializing rs-lock, potentially allowing other processes to modify rs-interval ...
kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
A vulnerability was found in the Linux kernel's ext4 filesystem within the ext4fillsuper function, where uninitialized access to ratelimitstate-lock can occur, where the sysfs interface is registered before properly initializing rs-lock, potentially allowing other processes to modify rs-interval ...
CVE-2024-10435
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-10435 didi Super-Jacoco triggerEnvCov command injection
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-10435 didi Super-Jacoco triggerEnvCov command injection
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2024-10435
CVE-2024-10435 affects didi Super-Jacoco 1.0. The vulnerability resides in the /cov/triggerEnvCov code path, where manipulation of the uuid argument enables command injection. It is exploitable over the network and exploitation has been disclosed publicly. Multiple sources (NVD, CVE List, Red Hat...
DiDi Super-Jacoco 命令注入漏洞
DiDi Super-Jacoco is a one-stop JAVA code full/diff coverage collection platform from China's DiDi DiDi company. A command injection vulnerability exists in DiDi Super-Jacoco version 1.0, which stems from the parameter uuid in the file /cov/triggerEnvCov that can lead to command injection...
PT-2024-16280
Name of the Vulnerable Software and Affected Versions didi Super-Jacoco version 1.0 Description A critical issue has been identified, affecting unknown code in the file /cov/triggerEnvCov. The manipulation of the uuid argument leads to command injection. This issue can be exploited remotely...
CVE-2024-10435: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cov/triggerEnvCov. The manipulation of the argument uuid leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to t...
SUSE CVE-2024-50014
In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature enabled: INFO: trying to register non-static...
DEBIAN-CVE-2024-49956
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroyworkqueue error When gfs2fillsuper fails, destroyworkqueue is called within gfs2glhashclear, and the subsequent code path calls destroyworkqueue on the same work queue again. This issue can be fixed by...
UBUNTU-CVE-2024-49956
In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroyworkqueue error When gfs2fillsuper fails, destroyworkqueue is called within gfs2glhashclear, and the subsequent code path calls destroyworkqueue on the same work queue again. This issue can be fixed by...
PT-2024-33854
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0+ Description: A problem was fixed in the Linux kernel involving a bug in the ext4 fast-commit replay path. This issue can be triggered with fstest generic/629 on a filesystem with the fast-commit feature...