3268 matches found
PT-2024-27078 · WordPress · Build App Online
Name of the Vulnerable Software and Affected Versions: Build App Online plugin for WordPress versions up to, and including, 1.0.21 Description: The issue is due to missing authentication checking in the set user cart function with the user id header value, allowing unauthenticated attackers to lo...
CVE-2024-35179 Unprivileged Stalwart Mail Server user can read files as root
Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using RUNASUSER, the specified user and therefore, web interface admins can read arbitrary files as root. This issue affects admins who have set up to run stalwart with RUNASUSER who handed out admin credentials to t...
WordPress Save as PDF plugin < 3.2.0 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Avatar Mitul Kumar in WordPress Plugin Save as PDF versions 3.2.0...
Stalwart Mail Server 安全漏洞
Stalwart Mail Server is an all-in-one mail server from Stalwart Labs. A security vulnerability exists in Stalwart Mail Server versions prior to 0.8.0, which stems from the ability of a specified user to read arbitrary files as root when using RUNASUSER...
WordPress plugin Save as PDF Plugin by Pdfcrowd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Save as PD...
PT-2024-14852
Name of the Vulnerable Software and Affected Versions Save as PDF Plugin by Pdfcrowd WordPress plugin versions prior to 3.2.0 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability ...
State of ransomware in 2024
Ransomware attacks continue to be one of the biggest contemporary cybersecurity threats, affecting organizations and individuals alike on a global scale. From high-profile breaches in healthcare and industrial sectors – compromising huge volumes of sensitive data or halting production entirely – ...
CVE-2023-39493
PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...
CVE-2023-39493
PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must...
UBUNTU-CVE-2024-27008
In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or value is assigned in fabricatedcboutput, there may be out of bounds access to dacusers array in case dcb-or is zero because ffsdcb-or is used as index there. The 'or...
CVE-2024-33684
Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0...
CVE-2024-33684
CVE-2024-33684 is a Missing Authorization vulnerability in the Pdfcrowd Save as PDF WordPress plugin (Save as PDF by Pdfcrowd) that allows Stored XSS. Affected: plugin versions up to 3.2.0. Public details confirm the issue and indicate it is patched (Patch Status: Patched); no exploitation detail...
CVE-2024-33684 WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability
Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0...
PT-2024-25440 · Pdfcrowd · Save As Pdf Plugin
Name of the Vulnerable Software and Affected Versions: Save as PDF plugin by Pdfcrowd versions 3.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Save as PDF plugin by Pdfcrowd, which allows Stored XSS. Recommendations: For versions 3.2.0 and...
WordPress plugin Save as PDF Plugin by Pdfcrowd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2022-48685
An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file cleansecbioldlogs is writable by all users and is executed as root, leading to privilege escalation...
WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability
Broken Access Control to Stored XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Save as PDF versions = 3.2.0...
WordPress plugin Login as User or Customer 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists in...
PT-2024-14143 · WordPress · Wp-Buy Login As User/Customer
Name of the Vulnerable Software and Affected Versions: wp-buy Login as User or Customer User Switching versions n/a through 3.8 Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation. This vulnerability can be exploited to escalate privilege...
A week in security (April 15 – April 21)
Last week on Malwarebytes Labs: Law enforcement reels in phishing-as-a-service whopper Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million Cannabis investment scam JuicyFields ends in 9 arrests Should you share your location with your partner? Giant Tiger...