3913 matches found
Importance of soft skills in Technology
By Owais Sultan Peoples ability to work or interact with others is often influenced by their soft skills which include traits… This is a post from HackRead.com Read the original post: Importance of soft skills in Technology...
WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin versions = 1.2. Solution Update the Pay With Stripe – Your WordPress Payments Stripe Gateway plugin to the latest available version at...
PT-2022-9507
Name of the Vulnerable Software and Affected Versions The Logo Showcase with Slick Slider WordPress plugin versions prior to 2.0.1 Description The issue concerns a lack of CSRF check in the "lswss save attachment data" AJAX action. This allows attackers to manipulate a logged-in high privilege us...
CVE-2021-24730: Missing Authorization
The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswsssaveattachmentdata AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media...
CVE-2021-24913: Cross-Site Request Forgery (CSRF)
The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswsssaveattachmentdata AJAX action, allowing attackers to make a logged in high privilege user, change title, description, alt text, and URL of arbitrary uploaded media...
CVE-2021-45229: Improper Neutralization of Input During Web Page Generation
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument. This issue affects Apache Airflow versions 2.2.3 and below...
[SECURITY] Fedora 34 Update: python2.7-2.7.18-20.fc34
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especial ly how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
CVE-2020-8107
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...
PT-2022-9063
Name of the Vulnerable Software and Affected Versions Bitdefender Antivirus Plus versions prior to 24.0.26.136 Bitdefender Internet Security versions prior to 24.0.26.136 Bitdefender Total Security versions prior to 24.0.26.136 Description A Process Control vulnerability in ProductAgentUI.exe as...
Beers with Talos, Ep. #116: Let's wade into the MuddyWater filled with Vipers
Beers with Talos BWT Podcast episode No. 116 is now available. Download this episode and subscribe to Beers with Talos: Apple Podcasts Google Podcasts Spotify StitcherRecorded Feb. 4, 2022. If iTunes and Google Play aren't your thing, click here. Most people... This is only the beginning! Please...
PT-2022-10205
Name of the Vulnerable Software and Affected Versions IntelR CoreTM processors with RadeonTM RX Vega M GL integrated graphics versions prior to 21.10 Description The issue is an out-of-bounds read that may allow an authenticated user to potentially enable information disclosure via local access...
MariaDB 10.3.0 < 10.3.30 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.3.30. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.30 advisory. - MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...
CVE-2021-25103: Improper Neutralization of Input During Web Page Generation
The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the urladdon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires...
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
...
ALPINE-CVE-2021-46662
MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
PT-2022-37314
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include the crash type being a Heap-buffer-overflow WRITE 16, and the crash state...
MariaDB 资源管理错误漏洞
MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB before 10.6.3 that stems from incorrect handling of withwindowfunc=true for the...
Mageia: Security Advisory (MGASA-2019-0214)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Beers with Talos, Ep. #115: Everybody's measured by quarters — even threat actors
Beers with Talos BWT Podcast episode No. 115 is now available. Download this episode and subscribe to Beers with Talos: Apple Podcasts Google Podcasts Spotify StitcherRecorded Jan. 14, 2022. If iTunes and Google Play aren't your thing, click here. We wanted... This is only the beginning! Please...
