WordPress MakeStories (for Google Web Stories) Plugin <= 3.0.3 is vulnerable to Arbitrary File Download

Software MakeStories for Google Web Stories Type Plugin Vulnerable versions = 3.0.3 Fixed in 3.0.4 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-38746 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 40afb38048ba Credits Majed...

Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-6387) due to OpenSSH

Summary Vulnerability in AIX's OpenSSH could allow a remote attacker to execute arbitrary code CVE-2024-6387. OpenSSH is used by AIX for remote login. Vulnerability Details CVEID:CVE-2024-6387 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary code on the system, caused by a...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

PoC exploit for CVE-2024-29510, a Ghostscript format string vuln...

CVE-2024-37437 WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Elementor Website Builder elementor.This issue affects Elementor Website Builder: from n/a through = 3.22.1...

.NET 8.0 Update - July 9, 2024 (KB5041081)

None None...

Description of the security update for SharePoint Server 2019: July 9, 2024 (KB5002615)

None None...

Description of the security update for Office 2016: July 9, 2024 (KB5002620)

None None...

Service Update 1.28 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Description of the security update for Outlook 2016: July 9, 2024 (KB5002621)

None None...

Security Bulletin: TSSC/IMC is vulnerable to arbitrary code execution due to systemd

Summary TSSC/IMC is vulnerable to arbitrary code execution due to systemd. A patch has been provided that updates the systemd library. CVE-2023-26604. Vulnerability Details CVEID:CVE-2023-26604 DESCRIPTION: systemd could allow a local authenticated attacker to gain elevated privileges on the...

The vulnerability of the TIA Administrator software-related to creating temporary download files in a directory with insecure permissions allows a hacker to disrupt the update process.

The vulnerability of the TIA Administrator software-related to the creation of temporary download files in a directory with insecure permissions. Exploiting this vulnerability could allow an attacker to disrupt the update process...

Arbitrary File Download Vulnerability in NetGuard VPN Security Gateway of Beijing NetGuard Nebula Information Technology Co.

Beijing Netnifty Information Technology Co., Ltd. is a leading enterprise in the domestic information security industry, specializing in the research, development, production and sales of information security products. Ltd. NetGuard VPN Security Gateway has an arbitrary file download vulnerabilit...

CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

Bluetron supOS Security Vulnerabilities

Bluetron supOS is an industrial operating system from the Chinese company Bluetron. A security vulnerability exists in Bluetron supOS version 5.0, which originates from allowing the api/image/download?fileName=... /directory traversal to read files...

CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

PT-2024-28744

Name of the Vulnerable Software and Affected Versions supOS version 5.0 Description The issue allows directory traversal for reading files via the "api/image/download" endpoint, specifically when the fileName parameter contains ../. This enables unauthorized access to files on the system...

ROS-20240704-10

A vulnerability in the python38.pth file of the Python programming language interpreter is related to ignoring the sys.path constraints specified in python38.pth . Exploitation of the vulnerability could allow an attacker acting remotely to download code from arbitrary locations A vulnerability i...

Exploit for Special Element Injection in Google Android

CVE-2024-0044-EXP This tool exploits CVE-2024-0044 to enable...

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

The loader-as-a-service LaaS known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique this year, findings from Sekoia reveal. "FakeBat primarily aims to download and execute the next-stage payload, such as IcedID, Lumma,...

GHSA-79W7-VH3H-8G4J yt-dlp File system modification and RCE through improper file-extension sanitization

Summary yt-dlp does not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp also reads config from the working directory and on Windows executables will be executed from the yt-dlp...