PT-2024-35209 · Webtechglobal · Webtechglobal Easy Csv Importer

Name of the Vulnerable Software and Affected Versions: WebTechGlobal Easy CSV Importer BETA versions n/a through 7.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling the upload of a web shell to a web server. This poses a significant...

@jup-ag/dca-v2-sdk (>=0.0.0-beta-1, <=0.0.0-beta-9), @jup-ag/smart-wallet (>=0.0.0-beta-1, <=0.0.0-beta-9) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.75.0)

@solana/web3.js NPM version 1.75.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @jup-ag/dca-v2-sdk =0.0.0-beta-1, =0.0.0-beta-1, =0.0.31, =1.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

PT-2023-29706 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.1.3 Discourse version 3.2.0.beta3 and earlier of the beta and tests-passed branches Description: Discourse is an open source platform for community discussion. There is an edge case where a bookmark reminder is...

Discourse 跨站脚本漏洞

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from a cross-site scripting vulnerability that originates from allowing embedding of Javascript via CSP, leading to user session hijacking. Affected product...

SUSE CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

PT-2023-18510 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.14 on the stable branch Discourse versions prior to 3.0.0.beta16 on the beta and tests-passed branches Description: The issue concerns a cross-site scripting attack through pending post titles, which can be...

Discourse 信息泄露漏洞

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse is vulnerable to an information disclosure vulnerability that originates in the "stable" branch of version 2.8.2 and earlier, the "beta" branch of version 2.9.0.bet...

CVE-2021-41095

Discourse is an open source discussion platform. There is a cross-site scripting XSS vulnerability in versions 2.7.7 and earlier of the stable branch, versions 2.8.0.beta6 and earlier of the beta branch, and versions 2.8.0.beta6 and earlier of the tests-passed branch. Rendering of some error...

CVE-2021-3138

In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms...

Design/Logic Flaw

An issue was discovered in beta versions of the 1Password command-line tool prior to 0.5.5 and in beta versions of the 1Password SCIM bridge prior to 0.7.3. An insecure random number generator was used to generate various keys. An attacker with access to the user's encrypted data may be able to...

D-Link DIR-818LW Command Injection Vulnerability

The D-Link DIR-818LW is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in HNAP1 SetWanSettings in the D-Link DIR-818LW versions 2.05.B03 through 2.06B01 BETA. The vulnerability stems from a network system or product not properly filtering specific...

GitHub Electron Arbitrary Command Execution Vulnerability

GitHub Electron is an application development framework from the American company GitHub. The framework supports writing cross-platform desktop applications using JavaScript, HTML and CSS. A security vulnerability exists in the protocol handler in GitHub Electron versions 1.8.2-beta.3 and earlier...

D-Link DIR-850L Information Disclosure Vulnerability

The D-Link DIR-850L is a wireless router from AUO D-Link. A security vulnerability exists in the NPAPI extension in the D-Link DIR-850L using FW114WWb07h2abbeta1 and earlier versions, which stems from the program failing to properly validate certificates. A remote attacker could exploit the...

Humhub Cross-Site Scripting Vulnerability

Humhub is an open source PHP-based social networking system. A cross-site scripting vulnerability exists in Humhub versions 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta.1 through 1.0.0-beta.2. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

SUMo - Software Update Monitor

SUMo S oftware U pdate Mo nitor keeps your PC up-to-date & safe by using the most recent version of your favorite software ! Unlike built-in auto update features, SUMo tells you if updates are available before you need to use your software. Features Automatic detection of installed software Detec...