CVE-2023-52180 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

CVE-2023-52180

CVE-2023-52180 affects Recipe Maker For Your Food Blog from Zip Recipes (Zip Recipes) up to version 8.1.0. The Wordfence vulnerability list notes an Authenticated (Contributor+) SQL Injection in this plugin, with a patch status of Patched. Impact is SQL Injection that can be triggered by an authe...

CVE-2023-52180: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

WordPress Plugin Recipe Maker For Your Food Blog from Zip Recipes SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Recipe Maker For Your Food...

OPENSUSE-SU-2023:0424-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

OPENSUSE-SU-2023:0423-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0423-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: Thi...

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0424-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: Thi...

WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE

Description The plugin accepts all zip files and automatically extracts the zip file into a publicly accessible directory without sufficiently validating the extracted file type. This may allows high privilege users such as administrator to upload an executable file type leading to remote code...

WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection

Software Recipe Maker For Your Food Blog from Zip Recipes Type Plugin Vulnerable versions = 8.1.0 Fixed in 8.1.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52180 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 015c5c5b9e32 Credits Muhammad Daffa...

Saia PG5 Controls Suite Path Traversal

The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to an incorrect limitation on the path name to the restricted access directory during the processing of ZIP format files. Exploiting this vulnerability can allow a perpetrato...

CVE-2023-6114

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the backups-dup-lite/tmp directory or the backups-dup-pro/tmp directory in the Pro version, which temporarily stores files containing sensitive data. When directory listing is...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

UnZip Pointer Swapping DoS

The vulnerability of the UnZip file archiver is related to errors in pointer manipulation due to improper handling of Unicode strings. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created zip file...

VulnCheck KEV: CVE-2021-24284

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fontsicon directory with no checks for malicious files such as PHP...

Prototype Pollution

Overview lodash.zipobjectdeep is a The lodash method .zipObjectDeep exported as a module. Affected versions of this package are vulnerable to Prototype Pollution through the zipObjectDeep function due to improper user input sanitization in the baseZipObject function. Note lodash.setwith is not...

Prototype Pollution

Overview lodash is a modern JavaScript utility library delivering modularity, performance, & extras. Affected versions of this package are vulnerable to Prototype Pollution through the zipObjectDeep function due to improper user input sanitization in the baseZipObject function. PoC...

UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware

The threat actor known as UAC-0099 has been linked to continued attacks aimed at Ukraine, some of which leverage a high-severity flaw in the WinRAR software to deliver a malware strain called LONEPAGE. "The threat actor targets Ukrainian employees working for companies outside of Ukraine,"...

Apache Superset Denial of Service Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A denial of service vulnerability exists in Apache Superset, which can be exploited by an authenticated attacker to upload a malicious ZIP for importing databases, dashboards, or datasets,...

Denial Of Service (DoS)

apachesuperset is vulnerable to Denial Of Service. The vulnerability is caused by a lack size checks for each file within a ZIP archive. This allows an attacker to upload a maliciously crafted ZIP file such as a ZIP bomb or an oversized file, and upon decompression. This flaw can result in...