CVE-2024-49254

CVE-2024-49254 concerns WordPress ajax-extend plugin <=1.0 with a remote code execution (RCE) vulnerability. The issue is described as improper control of code generation, enabling code injection. Affected software is the ajax-extend plugin (n/a through 1.0). The CVSS from the document set sho...

CVE-2024-49254 WordPress ajax-extend plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0...

PT-2024-33392 · Sunjianle · Ajax-Extend

Name of the Vulnerable Software and Affected Versions: Sunjianle ajax-extend versions n/a through 1.0 Description: The issue is related to improper control of code generation, allowing code injection. This vulnerability exists in Sunjianle and affects the ajax-extend component. Recommendations: F...

WordPress plugin ajax-extend 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

WordPress ajax-extend plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin ajax-extend versions = 1.0...

WordPress ajax-extend Plugin <= 1.0 is vulnerable to Remote Code Execution (RCE)

Software ajax-extend Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-49254 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 52c87350742c Credits stealthcopter Required privilege...

PT-2024-34047

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A flaw in the Linux kernel has been fixed, related to improved error handling in the udf extend file function. The inode bmap function was refactored to handle errors since udf next aext can...

Prototype Pollution

Overview pace-js is an Automatically add a progress bar to your site. Affected versions of this package are vulnerable to Prototype Pollution via the extend function, which recursively copies key-value pairs from the source object without properly validating property names. An attacker can exploi...

Prototype Pollution

Overview org.webjars.npm:pace-js is an Automatically add a progress bar to your site. Affected versions of this package are vulnerable to Prototype Pollution via the extend function, which recursively copies key-value pairs from the source object without properly validating property names. An...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to a panic state if extendtree is not created. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-49818 CVE-2024-46808 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcdextendaddressrange Why & How ASSERT if return NULL from kcalloc...

UBUNTU-CVE-2024-46808

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add missing NULL pointer check within dpcdextendaddressrange Why & How ASSERT if return NULL from kcalloc...

CVE-2019-11358

...

Prototype Pollution

chartist is vulnerable to Prototype Pollution. The vulnerability is due to lack of validation in the extend function to prevent arguments from modifying the object prototype in Chartist, allows an attacker to inject malicious object properties using the proto property, which recursively affects a...

CVE-2024-45435

Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function...

CVE-2024-45435

Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function...

CVE-2024-45435

CVE-2024-45435 affects Chartist 1.x–1.3.0, due to a lack of validation in the extend function that enables prototype pollution. This can allow an attacker to modify the Object prototype via proto , impacting all objects in the application (reported CVSS v3.1 base score 9.8, critical, with network...

PT-2024-31628 · Chartist · Chartist

Name of the Vulnerable Software and Affected Versions: Chartist versions 1.x through 1.3.0 Description: The issue allows Prototype Pollution via the extend function. This can potentially lead to security risks, as it may enable attackers to manipulate the prototype chain of objects, affecting the...

PT-2024-40842 · Git +1 · Hdf5

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including H5SL search, H5FS sect remove real, and H5FS...

ShopXO Code Issues Vulnerabilities

ShopXO is an open source enterprise-level open source e-commerce system from ShopXO Inc. A code issue exists in ShopXO version 6.1.0 and earlier versions, which is caused by a server-side request forgery vulnerability in the source parameter of the extend/base/Uploader.php file...