PT-2024-13854 · Prestashop · Prestashop Op'Art Easy Redirect

Name of the Vulnerable Software and Affected Versions: PrestaShop Op'art Easy Redirect versions 1.3.8 through 1.3.12 Description: The issue is related to SQL Injection via the Oparteasyredirect::hookActionDispatcher function. This allows for potential exploitation. Recommendations: For PrestaShop...

MAL-2024-979 Malicious code in dependency-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fec8d7ec43c80d82430113c122d14e2ff81d81b32ded41933bbdf246305772b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-978 Malicious code in can-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f696066311cec522d6c17a2546c56b2eb9c9af638d62dbe8814fc95461eb0750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-1264

A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be...

CVE-2023-38579

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally...

Cross site request forgery (csrf)

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally...

CVE-2023-43534

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...

Authorization

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-43534

CVE-2023-43534 describes a memory corruption vulnerability in Qualcomm WLAN chipsets when validating the TID to Link Mapping action request frame during station association to an access point. The attribute scores indicate a network-exposed, high-severity issue with low attack complexity and no u...

CVE-2023-43523 Reachable Assertion in WLAN Firmware

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-43523

CVE-2023-43523 relates to a transient Denial of Service in Qualcomm WLAN firmware when processing 11AZ RTT management action frames received over OTA. Affected are Qualcomm closed‑source WLAN components; CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges, High impact on availa...

CVE-2023-43523 Reachable Assertion in WLAN Firmware

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2024-22773

Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass...

CVE-2024-22773

CVE-2024-22773 affects Intelbras Action RF 1200 routers (version 1.2.2 and earlier) and Action RG 1200 routers (version 2.1.7 and earlier). The root cause described across connected sources is that the devices expose the password in a cookie, enabling a login bypass. This leads to unauthorized ac...

PT-2024-17680 · Juanpao · Jpshop

Name of the Vulnerable Software and Affected Versions: Juanpao JPShop versions up to 1.5.02 Description: A critical issue was found in the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic url leads to...

PT-2024-13096 · Qualcomm · Snapdragon +134

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A transient Denial of Service DOS can occur while processing a specific management action frame, 11AZ RTT, received through Over-The-Air OTA. Recommendations: At the moment, there is no...

PT-2024-17676 · Juanpao · Jpshop

Name of the Vulnerable Software and Affected Versions: Juanpao JPShop versions up to 1.5.02 Description: A critical issue has been found in the API component, specifically affecting the actionUpdate function of the /api/controllers/merchant/design/MaterialController.php file. The manipulation of...

CVE-2024-0859

The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This is due to missing or incorrect nonce validation on the processbulkaction function in ListAffiliatesTable.php. This makes it possible for unauthenticated...

Cross site request forgery (csrf)

The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This is due to missing or incorrect nonce validation on the processbulkaction function in ListAffiliatesTable.php. This makes it possible for unauthenticated...

CVE-2023-6989

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP...