Brooklyn <= 4.9.7.6 - PHP Object Injection

Description The brooklyn theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7.6 via deserialization of untrusted input from an unknown parameter. This makes it possible for authenticated attackers, with subscriber access and above, to inject a PHP...

Wordpress Augmented-Reality - Remote Code Execution Unauthenticated

Exploit Title: Wordpress Augmented-Reality - Remote Code Execution Unauthenticated Date: 2023-09-20 Author: Milad Karimi Ex3ptionaL Category : webapps Tested on: windows 10 , firefox import requests as req import json import sys import random import uuid import urllib.parse import urllib3 from...

runc: file descriptor leak

A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...

OESA-2024-1159 aops-ceres security update

An agent which needs to be adopted in client, it managers some plugins, such as gala-gopherkpi collection, fluentdlog collection and so on. Security Fixes: In versions 1.3.0-1.4.1 of the ceres software package, the executeshellcommand function does not properly verify or filter the command or...

CVE-2024-24034

Setor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter, allows remote attackers to execute arbitrary code...

Open redirect

Setor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter, allows remote attackers to execute arbitrary code...

CVE-2024-24202

An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file...

kernel: NULL pointer dereference in nvmet_tcp_execute_request

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service...

Malicious code in @bughunter0007/packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7917dfb8691c19dbb896a26b03004bfa6ac280745ce23f44939f929faffbc94 The OpenSSF Package Analysis project identified '@bughunter0007/packages-analytics' @ 1.2.2 npm as malicious. It is considered malicious because...

USN-6592-2: libssh vulnerabilities

USN-6592-1 fixed vulnerabilities in libssh. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that libssh incorrectly handled the ProxyCommand and the ProxyJump features. A remote attacker could possibly use this...

PT-2024-10617 · Blockmason · Blockmason Credit-Protocol

Name of the Vulnerable Software and Affected Versions: blockmason credit-protocol affected versions not specified Description: A vulnerability was found in the blockmason credit-protocol, affecting the executeUcacTx function of the contracts/CreditProtocol.sol file in the UCAC Handler component...

SUSE SLES12: libpmi0 / libslurm31 / perl-slurm / slurm / slurm-auth-none / etc (SUSE-SU-2024:0315-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0315-1 advisory. - CVE-2023-49933: Fixed a message extension attack that could bypass the message hash bsc1218046. - CVE-2023-49936: Fixed a NULL...

CVE-2023-41276 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41276

CVE-2023-41276 describes a buffer copy without input size validation that affects multiple QNAP OS lines. Affected products include QTS, QuTS hero, and QuTScloud. The underlying issue allows an authenticated administrator to execute code over the network. Fixed in QTS 5.1.2.2533+ (build 20230926+...

PT-2024-1639 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.4.2596 build 20231128 QuTS hero versions prior to h5.1.4.2596 build 20231128 QuTScloud versions prior to c5.1.5.2651 Description: A buffer copy without checking size of input vulnerability has been reported to affect...

CVE-2024-24524

Cross Site Request Forgery CSRF vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the addmenu.php component...

SUSE SLES15: libnss_slurm2 / libpmi0 / libslurm35 / perl-slurm / slurm / etc (SUSE-SU-2024:0287-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0287-1 advisory. Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49936: Prevent NU...

CVE-2023-31505

An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file...

CVE-2023-37518

HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute within the context of the running user...

CVE-2024-22894

An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote attackers to execute arbitrary code via the password component in the shadow file...