PT-2024-12570 · Unknown · Kk Star Ratings

Name of the Vulnerable Software and Affected Versions: KK Star Ratings versions 5.4.3 and earlier Description: The issue is related to a Missing Authorization vulnerability in the KK Star Ratings plugin, allowing rate manipulation via IP spoofing. This vulnerability exploits incorrectly configure...

Arbitrary Code Injection

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Arbitrary Code Injection via the absolutePath function, due to missing path normalization, by executing a twig SSTI template. Remediation Upgrade craftcms/cms to version 4.12.2, 5.4.3 or...

New Zoom Screen-Sharing Bug Lets Other Users Access Restricted Apps

A newly discovered glitch in Zoom's screen sharing feature can accidentally leak sensitive information to other attendees in a call, according to the latest findings. Tracked as CVE-2021-28133, the unpatched security vulnerability makes it possible to reveal contents of applications that are not...