PT-2024-10225 · Schneider Electric · Schneider Electric Remoteconnect +1

The affected software is Schneider Electric RemoteConnect and SCADAPack x70 Utilities, which have a deserialization of untrusted data issue. This could lead to loss of confidentiality, integrity, and potential remote code execution on a workstation when a non-admin authenticated user opens a...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Adobe Connect Privilege Escalation Code Injection

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

MAL-2024-11867 Malicious code in 32red-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6fd8b74aa90de644864280c7ff35c25fb0c3c059d18172022a417da92eacd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6fd8b74aa90de644864280c7ff35c25fb0c3c059d18172022a417da92eacd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 725d2bf04ddf915f303fabf69710fc72dda0ebbd3d770b0d799f7cba032c98eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:4319-1 Security update for docker

This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker whic...

CVE-2024-54343

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thehowarde Connect Contact Form 7 to Constant Contact connect-contact-form-7-to-constant-contact-v3 allows Reflected XSS.This issue affects Connect Contact Form 7 to Constant Contact: from n/a...

CVE-2024-54335

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

CVE-2024-54343

CVE-2024-54343 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Connect Contact Form 7 to Constant Contact (

CVE-2024-54335

CVE-2024-54335 is a Reflected XSS in ZebraSoft ImmoToolBox Connect. Connected Red Hat advisory confirms the issue affects ImmoToolBox Connect up to and including 1.3.3, caused by improper neutralization of input during web page generation. Impact: client-side script execution in users’ browsers. ...

CVE-2024-54335 WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

CVE-2024-54335 WordPress ImmoToolBox Connect plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ImmoSoft ImmoToolBox Connect immotoolbox-connect allows Reflected XSS.This issue affects ImmoToolBox Connect: from n/a through = 1.3.3...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-02097)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect version 12.6 and earlier and version 11.4.7 and earlier, which can be exploited by an attacker to inject malicious script into vulnerable form...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2025-02096)

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. A security vulnerability exists in Adobe Connect version 12.6 and earlier and version 11.4.7 and earlier, which can be exploited by an attacker to inject malicious script into vulnerable form...