PT-2022-12223

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.1.2137.9 Zoho ManageEngine Desktop Central MSP versions prior to 10.1.2137.9 Description The issue allows attackers to bypass authentication, enabling them to read sensitive information or...

svg-vector-icon-plugin WP SVG Icons ZIP Upload

The vulnerability of the svg-vector-icon-plugin WP SVG Icons plugin for WordPress lies in insufficient validation of the requests being made. Exploiting this vulnerability could allow a malicious actor to download a arbitrary ZIP archive containing a.php file remotely...