CVE-2024-42834

Exploit-Titel: INCOGNITO SAC GESPEICHERTE CROSS-SITE-SCRIPTING XSS SCHWACHSTELLE Datum: 26. JULI 2024 Exploit-Autor: Etienne Supra Hersteller-Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Der Hersteller wurde informiert und hat die...

SUSE-SU-2024:0540-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgrade to 14.11: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY bsc1219679...

CVE-2020-8201

Node.js 12.18.4 and 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the architecture ...

WordPress Symposium Plugin 14.10 - SQL Injection

This WordPress Symposium plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update to version 14.11...