Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25647)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-29758)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. Foxit PDF Reader and Foxit PDF Editor has a code execution vulnerability, the vulnerability stems from the AcroForm module has a reuse after release problem, an attacker can use the...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-29751)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25649)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25644)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Editor Code Execution Vulnerability (CNVD-2024-24370)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Editor, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-29757)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25642)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by attackers to obtain sensitive information...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-29755)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Foxit PDF Reader and Foxit PDF Editor Code Execution Vulnerability (CNVD-2024-25643)

Foxit PDF Reader is a PDF reader from China Foxit Foxit.Foxit PDF Editor is a PDF editor from China Foxit Foxit. A code execution vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which can be exploited by an attacker to execute arbitrary code on the system...

Rehub < 19.6.2 - Authenticated (Editor+) Local File Inclusion

Description The Rehub theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 19.6.1. This makes it possible for authenticated attackers, with editor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any...

grafana security and bug fix update

An update is available for grafana. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

WordPress WooCommerce Checkout Field Editor (Checkout Manager) plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Skalucy Patchstack Alliance in WordPress Plugin WooCommerce Checkout Field Editor Checkout Manager versions = 2.1.8...

Salon booking system < 9.6.6 - Editor+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "Salon Services Add New...

Salon booking system < 9.6.6 - Editor+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to "Salon Services Add New...

Salon booking system < 9.6.6 - Editor+ Stored XSS via Email Settings

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin or editor depending on plugin configuration to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

WordPress Ultimate Maps by Supsystic Plugin <= 1.2.16 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ultimate Maps by Supsystic Type Plugin Vulnerable versions = 1.2.16 Fixed in 1.2.17 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-31271 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b920f5674db6 Credits Steven Julia...

CVE-2024-25696

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack...

CVE-2024-25696 Stored XSS in Portal for ArcGIS

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack...

CVE-2024-25696 Stored XSS in Portal for ArcGIS

There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when accessing the page editor an image will render in the victim’s browser. The privileges required to execute this attack...