WordPress Spam protection, Anti-Spam, FireWall by CleanTalk plugin <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing vulnerability

Authorization Bypass via Reverse DNS Spoofing vulnerability discovered by mikemyers in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.43.2...

Taiga 安全漏洞

Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version 6.8.1, which stems from the presence of an open redirection vulnerability that allows an attacker to redirect a user to an arbitrary website by appending a crafted link...

PT-2024-40108 · Github Actions · Dawidd6/Action-Download-Artifact

Name of the Vulnerable Software and Affected Versions: dawidd6/action-download-artifact versions prior to v6 Description: The issue allows an unprivileged attacker to introduce compromised artifacts into a privileged workflow context by exploiting the default behavior of searching a repository's...

AZL-53624 CVE-2024-52804 affecting package python-tornado 6.2.0-1

Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...

DEBIAN-CVE-2024-52804

Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...

CVE-2024-32770

A cross-site scripting XSS vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 2024/07/12 a...

PT-2024-24839 · Synology · Photo Station

Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.3 Description: A cross-site scripting XSS vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject maliciou...

LogSign Unified SecOps Platform 操作系统命令注入漏洞

Logsign Unified SecOps Platform is a security operations platform from Logsign, Inc. for collecting, storing, analyzing, and responding to security data from a variety of sources. An operating system command injection vulnerability exists in LogSign Unified SecOps Platform versions prior to 6.4.8...

PT-2024-24838 · Synology · Photo Station

Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.3 Description: A cross-site scripting XSS vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. Recommendations:...

QNAP Systems Photo Station 跨站脚本漏洞

QNAP Systems Photo Station is an online photo album from QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP Systems Photo Station prior to version 6.4.3, which stems from the inclusion of a cross-site...

CVE-2024-9768

The Formidable Forms WordPress plugin before 6.14.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

ntopng 安全漏洞

ntopng is a web-based network traffic monitoring application from ntop open source. A security vulnerability exists in ntopng version 6.2, which stems from a heap buffer overflow vulnerability in the Flow::dissectMDNS function...

The vulnerability of the Linux operating system’s kernel’s ipv6 component, which allows a hacker to access confidential information

The vulnerability of the Linux operating system’s IPv6 kernel component is related to the disclosure of information in the inet6rtmgetaddr function. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2024-52771

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

Vegam 4i 安全漏洞

Vegam 4i is an IoT data tool from Vegam. A security vulnerability exists in Vegam 4i v.6.3.47.0 and prior versions, which stems from a vulnerability that could allow a remote attacker to gain access to sensitive information via the Print Label feature...

ARM Mbed OS 安全漏洞

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from the British company ARM. A security vulnerability exists in ARM Mbed OS version 6.16.0, which stems from the HCI parsing software allocating buffers based on the length specified in the...

The vulnerability in the ipv6_fix.cgi script of NETGEAR R8500 router software allows a hacker to trigger a service failure.

The vulnerability in the ipv6fix.cgi script of NETGEAR R8500 router software is related to buffer overflows in the stack when processing the ipv6pridns parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack by sending a specially crafted POST reque...

CVE-2024-52506 Graylog can leak other users' reports via concurrent PDF report rendering

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jorge Diaz - ddiax Patchstack Alliance in WordPress Plugin WPDM – Premium Packages versions = 6.0.5...