WordPress plugin Woo Total Sales 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Woo Total Sales plugin <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability

Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability discovered by Lucio Sá in WordPress Plugin Woo Total Sales versions = 3.1.4...

WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Total Poll Lite versions = 4.9.9...

WordPress Total Poll Lite Plugin <= 4.9.9 is vulnerable to Broken Access Control

Software Total Poll Lite Type Plugin Vulnerable versions = 4.9.9 Fixed in 4.10.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32821 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c0cd27d36a6e Credits thiennv Required privilege...

total-lokal.de Cross Site Scripting vulnerability OBB-3919144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Target Middle East Governments with Evasive "CR4T" Backdoor

Government entities in the Middle East have been targeted as part of a previously undocumented campaign to deliver a new backdoor dubbed CR4T. Russian cybersecurity company Kaspersky said it discovered the activity in February 2024, with evidence suggesting that it may have been active since at...

CVE-2024-29964

Summary (CVE-2024-29964) : Brocade SANnav versions prior to 2.3.0a erroneously set file permissions, including for Docker-related files. This weakness can allow an unprivileged attacker with server access to read sensitive information from these files. Public sources consistently cite the same is...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

CVE-2024-22014: UNIX Symbolic Link (Symlink) Following

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

PT-2024-19156 · Qihoo 360 · 360 Total Security Antivirus

Name of the Vulnerable Software and Affected Versions: 360 Total Security Antivirus versions 11.0.0.1061 and earlier Description: An issue in 360 Total Security Antivirus allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete. This enables attackers to...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

CVE-2024-22014

An issue exists in 360 Total Security Antivirus versions 11.0.0.1061 and earlier for Windows. The vulnerability allows attackers to perform a Symbolic Link Follow to Arbitrary File Delete , which can lead to escalated privileges by enabling the deletion of arbitrary files. To resolve this, users ...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

360 Total Security 安全漏洞

360 Total Security is a suite of computer antivirus software from the Beijing, China-based company Qihoo Technology Limited 360. A security vulnerability exists in 360 Total Security Antivirus version 11.0.0.1061 Windows, which originated from a vulnerability that allows an attacker to delete...

SUSE CVE-2023-52636

In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket A short read may occur while reading the message footer from the socket. Later, when the socket is ready for another read, the messenger invokes all readpartial...

CVE-2023-6154

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This...

CVE-2023-6154 Local privilege escalation in Bitdefender Total Security (VA-11168)

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This...

CVE-2023-6154

CVE-2023-6154 affects Bitdefender Total Security, Internet Security, Antivirus Plus, and Antivirus Free (all reported as 27.0.25.114). Root cause: a configuration setting issue in seccenter.exe that allows an attacker to change the product’s expected behavior and potentially load a third‑party li...

CVE-2023-6154: External Control of System or Configuration Setting

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This...

Bitdefender 多款产品安全漏洞

Bitdefender Antivirus Plus and others are products of the Romanian company Bitdefender.Bitdefender Antivirus Plus is a suite of antivirus software that offers mainly cyber threat detection and ransomware protection.Bitdefender Internet Security is a free version of antivirus software that mainly...