Remote code execution

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42698

CVE-2022-42698 affects the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The root cause is an unauthenticated Arbitrary File Upload due to insufficient input/file validation in the plugin, enabling an attacker to upload arbitrary files via the vulnerable endpoint. Impact is high:...

CVE-2022-42497 WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42497

The CVE-2022-42497 entry concerns the WordPress plugin Api2Cart Bridge Connector (versions ≤ 1.1.0). The attacked component is the plugin’s code path that enables Arbitrary Code Execution. Public sources indicate the vulnerability can be triggered to execute code on affected sites (some reference...

WordPress plugin Api2Cart Bridge Connector 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Api2Cart Bridge Connector SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2022-26507 · WordPress · Wordpress Api2Cart Bridge Connector

Name of the Vulnerable Software and Affected Versions: WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue concerns an Unauth. Arbitrary File Upload vulnerability. Recommendations: For WordPress Api2Cart Bridge Connector plugin version 1.1.0 and earlier,...

PT-2022-26459 · Unknown · Api2Cart Bridge Connector

Name of the Vulnerable Software and Affected Versions: Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue is related to an Arbitrary Code Execution vulnerability. Recommendations: For Api2Cart Bridge Connector plugin version 1.1.0 and earlier, update to a version...

CVE-2022-42497: Improper Neutralization of Special Elements used in an SQL Command

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-42698: Unrestricted Upload of File with Dangerous Type

Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

GSD-2022-1007598 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.296 by commit...

GSD-2022-1007522 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

GSD-2022-1007418 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1007284 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...

GSD-2022-1006841 drm: bridge: adv7511: unregister cec i2c device after cec adapter

drm: bridge: adv7511: unregister cec i2c device after cec adapter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006835 drm/bridge: megachips: Fix a null pointer dereference bug

drm/bridge: megachips: Fix a null pointer dereference bug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

[SECURITY] Fedora 37 Update: android-tools-33.0.3p1-1.fc37

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 35 Update: android-tools-33.0.3p1-2.fc35

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 36 Update: android-tools-33.0.3p1-1.fc36

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

PT-2022-34910 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to the drm/msm/dp component, specifically concerning bridge lifetime. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...