CVE-2024-0774 Any-Capture Any Sound Recorder Registration memory corruption

A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown code of the component Registration Handler. The manipulation of the argument User Name/Key Code leads to memory corruption. It is possible to launch the attack...

CVE-2024-0774

CVE-2024-0774 affects Any-Capture Any Sound Recorder 2.93, via the Registration Handler component. The vulnerability arises from manipulating the User Name/Key Code argument, leading to memory corruption. Exploitation is described as local (attack on the local host) and public exploits are noted....

Any-Capture Any Sound Recorder Buffer Error Vulnerability

Any-Capture Any Sound Recorder is a powerful tool from Any-Capture open source to record audio/voice/sound from a microphone or other audio device. A buffer error vulnerability exists in Any-Capture Any Sound Recorder version 2.93, which stems from unknown code contained in the component...

PT-2024-13866 · Unknown · Hozard Alarm System

Name of the Vulnerable Software and Affected Versions: Hozard alarm system Alarmsysteem version 1.0 Description: The issue concerns Improper Authentication in the Hozard alarm system. Specifically, commands sent via the SMS functionality are accepted from random phone numbers. This allows an...

PT-2024-13877 · Avideo · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo dev master commit 15fed957fb Description: A recovery notification bypass issue exists in the userRecoverPass.php captcha validation functionality. This allows a specially crafted HTTP request to silently create a recovery pass cod...

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

CVE-2023-50873

Technical details about CVE-2023-50873 (Add Any Extension to Pages) are not provided in the connected documents. Public details such as affected versions, root cause, exploitation, or fixes are not present in the supplied materials. Monitor for updates.

CVE-2023-51006

An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors...

PT-2023-24733 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 1.0.0 through 3.7.36 Stormshield Network Security SNS versions 3.8.0 through 3.11.24 Stormshield Network Security SNS versions 4.0.0 through 4.3.18 Stormshield Network Security SNS versions 4.4.0...

WordPress Contact Form To Any API 1.1.6 Cross Site Request Forgery

Exploit Title: WP Plugins Contact Form to Any API history.pushState'', '', '/'; document.forms0.submit; Recommendation Upgrade to version 1.1.7...

dockerspawner Security Vulnerabilities

dockerspawner is a tool for spawning JupyterHub single-user servers in Docker containers. A security vulnerability exists in dockerspawner version 0.11.0 up to and including version 13.0, which stems from allowing a user to launch any image that can be pulled, rather than being limited to a singl...

XWiki Platform Security Vulnerability

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in Xwiki versions 6.3-milestone-2 through 14.10.15 and 15.0-rc-1 through 15.5.1, which stems from disclosing the content of all documents to...

WordPress Contact Form to Any API Plugin <= 1.1.6 is vulnerable to Broken Access Control

Software Contact Form to Any API Type Plugin Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47871 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 81c0f0123458 Credits Arvandy Require...

CVE-2023-6020

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

CVE-2023-6023

An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifactpath URL parameter...

CVE-2023-6018

An attacker can overwrite any file on the server hosting MLflow without any authentication...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-32741

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2...