215 matches found
WordPress SearchIQ plugin <= 4.5 - Sensitive Data Exposure via Log File vulnerability
Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin SearchIQ versions = 4.5...
WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability
Sensitive Data Exposure via Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WordPress Backup & Migration versions = 1.4.7...
WordPress ConvertKit plugin <= 2.4.5 - Email Disclosure in Log File vulnerability
Email Disclosure in Log File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin ConvertKit versions = 2.4.5...
WordPress Paid Memberships Pro – Payfast Gateway Add On Plugin <= 1.4.1 is vulnerable to Sensitive Data Exposure
Software Paid Memberships Pro – Payfast Gateway Add On Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.4.2 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-30514 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...
WordPress RegistrationMagic Plugin <= 5.3.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software RegistrationMagic Type Plugin Vulnerable versions = 5.3.0.0 Fixed in 5.3.1.0 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-2951 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1d9399326561 Credits Joshua Chan Required...
WordPress WooCommerce Google Feed Manager Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Software WooCommerce Google Feed Manager Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29112 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a47ab0c3a92d Credits Joshua Chan Required...
CVE-2023-52493
CVE-2023-52493 concerns the Linux kernel’s bus: mhi: host subsystem. The vulnerability arises from locking the channel by taking both read and write locks in succession during parse_xfer_event, allowing a client callback to queue buffers while holding locks, which can lead to multiple locks and a...
Malicious code in fca-chan (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08fe489db5da6b673eeb10faaccf599c46ae3413b6cd76f4a56ab5c6d1b3780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8175 Malicious code in fca-chan (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f08fe489db5da6b673eeb10faaccf599c46ae3413b6cd76f4a56ab5c6d1b3780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-22715
Auth. admin+ Cross-Site Scripting XSS vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin = 1.12.1 versions...
CVE-2023-22715
Auth. admin+ Cross-Site Scripting XSS vulnerability in Lester 'GaMerZ' Chan WP-CommentNavi plugin = 1.12.1 versions...
CVE-2023-22715
WP-CommentNavi (WordPress)
The vulnerability of the l2cap_chan_put() function (l2cap_core.s) in the Linux operating system allows a attacker to increase their privileges.
The vulnerability of the l2capchanput function l2capcore.c in the Linux operating system is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to increase their privileges...
SUSE CVE-2007-1594
The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...
SUSE CVE-2017-17090
An issue was discovered in chanskinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chanskinny aka SCCP protocol channel driver is flooded with certain requests, it can cause the asterisk process to use...
PT-2023-35003 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: The issue is related to a double increment of client count in the dma chan get function. This problem was introduced in version v4.0 and is fixed in Linux Kernel version v6.1.9. The actual...
UBUNTU-CVE-2022-23479
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a buffer over flow in xrdpmmchandatain function. There are no known workarounds for this issue. Users are advised to upgrade...
Facepay 安全漏洞
Facepay is an app by Andrew Chan personal developer. It is used for face payments. A security vulnerability exists in Facepay version 1.0, which stems from an unknown function in the file /face-recognition-php/facepay-master/camera.php, where the operation of the parameter userId leads to...
PT-2022-33430 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.1 Description: The issue is related to a regression in the l2cap global chan by psm function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
