CVE-2024-13405 Apptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block

The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awpipdeny' page. This makes it possible for unauthenticated attackers to block IP addresses via a...

PT-2025-7349 · WordPress · Apptivo Business Site Crm

Name of the Vulnerable Software and Affected Versions: Apptivo Business Site CRM plugin for WordPress versions up to, and including, 5.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'awp ip deny' page. This allows...

The vulnerability of DRM/VMWGFX components in Linux kernel allows a perpetrator to trigger a service failure.

The vulnerability of DRM/VMWGFX components in Linux operating systems is related to improper blocking of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the io_uring component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iouring component in the Linux operating system’s kernel is related to incorrect blocking of resources in the iotctxexitcb function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-0935

The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on several AJAX actions in all versions up to, and including, 8.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to...

PT-2025-6816 · WordPress · Media Library Folders

Name of the Vulnerable Software and Affected Versions: Media Library Folders plugin for WordPress versions up to, and including, 8.3.0 Description: The issue is related to a missing capability check on several AJAX actions, allowing authenticated attackers with Author-level access and above to...

SUSE CVE-2024-6284

In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended might block or not block the desired addresses. This issue affects: https://pkg.go.dev/github.com/google/[email protected] The bug was fixe...

CVE-2022-23513

Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on queryads endpoint. In the case of application, this...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the block component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the block component in the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the amdtp-stream component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the amdtp-stream component in the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-8479

For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-22163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shield Security Shield Security – Smart Bot Blocking & Intrusion Prevention Security allows Stored XSS.This issue affects Shield Security – Smart Bot Blocking & Intrusion Prevention Security: from...

Malicious code in navigation-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a538f0b4692318ebf66b044328d39a0f011a80e355def5c4bd12f506bfc3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1152 Malicious code in navigation-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62a538f0b4692318ebf66b044328d39a0f011a80e355def5c4bd12f506bfc3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Xen hypervisors, related to improper blocking mechanisms, allows attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the riscv component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the riscv component in the Linux operating system’s kernel is related to improper blocking in the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the vsock component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the vsock component in the Linux operating system’s kernel is related to improper blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to improper blocking mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...