1913 matches found
Malicious code in Bе.Vlaanderen.Basisregіsters.StreetNameRegistry.Api.Extract (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4396 Malicious code in Bе.Vlaanderen.Basisregіsters.StreetNameRegistrу.Api.Extrаct (NuGet)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-6027: Improper Neutralization of Special Elements used in an SQL Command
The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to time-based SQL Injection via the ‘conditions’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
OPENSUSE-SU-2024:10523-1 perl-Archive-Extract-0.78-1.1 on GA media
These are all security issues fixed in the perl-Archive-Extract-0.78-1.1 package on the GA media of openSUSE Tumbleweed...
OESA-2024-1733 tracker3-miners security update
Tracker is an efficient search engine and for desktop, embedded and mobile. Security Fixes: A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by ...
PT-2024-28394
Name of the Vulnerable Software and Affected Versions Dokan Pro plugin for WordPress versions up to, and including, 3.10.3 Description The issue allows unauthenticated attackers to perform SQL Injection via the code parameter due to insufficient escaping on the user-supplied parameter and lack of...
CVE-2024-4845: Improper Neutralization of Special Elements used in an SQL Command
The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘optionslistid’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
PT-2024-30096
Name of the Vulnerable Software and Affected Versions The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress versions prior to 3.8.9 Description The issue allows unauthenticated attackers to extract sensitive data, such as Personally Identifiable...
CVE-2023-49223
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
CVE-2023-49223
The Precor touchscreen console models P62, P80, and P82 are vulnerable to a security flaw where the root password is stored in the /etc/passwd file. This oversight allows a remote attacker to extract files and obtain sensitive information. As a temporary workaround, it is recommended to restrict ...
CVE-2023-49223
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
PT-2024-24350
Name of the Vulnerable Software and Affected Versions wpForo Forum plugin for WordPress versions up to, and including, 2.3.3 Description The issue is related to SQL Injection via the slug attribute of the wpforo shortcode due to insufficient escaping on the user-supplied parameter and lack of...
OESA-2024-1670 tracker3-miners security update
Tracker is an efficient search engine and for desktop, embedded and mobile. Security Fixes: A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by ...
PT-2024-29447 · WordPress · Contact Form Plugin By Fluent Forms
Name of the Vulnerable Software and Affected Versions: The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress versions up to, and including, 5.1.15 Description: The issue is related to PHP Object Injection via deserialization of untrusted...
PT-2024-30360
Name of the Vulnerable Software and Affected Versions Tutor LMS plugin for WordPress versions up to, and including, 2.7.0 Description The issue allows authenticated attackers with Instructor-level permissions and above to perform time-based SQL Injection via the question id parameter due to...
tcpslice: use-after-free in extract_slice()
A heap use-after-free flaw was found in tcpslices' extractslice. This flaw allows an attacker with local network access to pass a specially crafted 'pcap' file to tcpslice, causing segmentation fault. This vulnerability halts or crashes the application, leading to a denial of service...
JADX file override vulnerability
Summary when jadx parses a resource file, there is an escape problem with the style file, which can overwrite other files in the directory when saving the decompile result. Although I don't think this vulnerability realizes path traversal in the true sense of the word , I reported it anyway Detai...
WordPress LayerSlider Plugin: SQL Injection Vulnerability
On March 25th, 2024, a critical security vulnerability was discovered in the LayerSlider plugin for WordPress, marked as CVE-2024-2879. The plugins have more than 10 lakh active installations. This flaw, rated with a CVSS score of 7.5 out of 10.0, is identified as an SQL injection vulnerability...
CVE-2024-2018
CVE-2024-2018 affects the WP Activity Log Premium plugin for WordPress. The vulnerability is an SQL Injection via entry->roles in all versions up to 4.6.4, caused by insufficient escaping of the user-supplied parameter and insufficient preparation of the SQL query. This can enable authenticate...
The vulnerability of the extract() function in Outdoorbits Little-Backup-Box software, which allows a hacker to execute arbitrary code.
The vulnerability of the extract function in image and multimedia file backup software from Outdoorbits Little-Backup-Box is related to insufficient data authenticity checking. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...