WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

Full Path Disclosure FPD vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Posti Shipping versions = 3.10.2...

Malicious code in videoads-util-misc-general (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e09df3f56783004e4936e57f3a6dac4e757c0d2d3cb2c0acf10bf15c6f4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in req-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05048fd5770283947973e00b424f5a1810a67067ed3451a3bb5f9f5a5ce5d703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luzmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ec2659d67186f0eebafb922f056460df73d8a793d632e70e66421f52a4fbf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfcord-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a55c578ea76b7795bf2336ca5deca359adbfef86c306c5c2a588dd5c59bbe187 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Posti Shipping Plugin <= 3.10.2 is vulnerable to Full Path Disclosure (FPD)

Software Posti Shipping Type Plugin Vulnerable versions = 3.10.2 Fixed in 3.10.3 OWASP Top 10 A3: Sensitive Data Exposure Classification Full Path Disclosure FPD CVE CVE-2024-50512 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f13c6383cb59 Credits Fariq Fadillah Gusti...

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system allows a hacker to gain full control over the application.

The vulnerability of the Connector/Python driver component of MySQL Connectors in the Oracle MySQL database management system is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to gain full control over the application using...

The vulnerability of the Reports component of the Oracle Banking Liquidity Management platform allows a hacker to gain full control over the application.

The vulnerability of the Reports component of the Oracle Banking Liquidity Management management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using th...

PT-2024-16234 · Unknown · Matrix Door Controller Cosec Vega Faxq

Name of the Vulnerable Software and Affected Versions: Matrix Door Controller Cosec Vega FAXQ affected versions not specified Description: The issue arises from improper implementation of session management at the web-based management interface. A remote attacker could exploit this by sending a...

PT-2024-7403 · Ibm · Ibm Flexible Service Processor

Name of the Vulnerable Software and Affected Versions: IBM Flexible Service Processor FSP versions FW860.00 through FW860.B3 IBM Flexible Service Processor FSP versions FW950.00 through FW950.C0 IBM Flexible Service Processor FSP versions FW1030.00 through FW1030.61 IBM Flexible Service Processor...

Malicious code in dexter-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6bf5598a2ab8cfa28dc285027cc8774d194d3b78d22da1d849cd6ef4d140d28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45263

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upload interface allows the uploading of arbitrary files to the device. Once the device executes the files, it can lead to information leakage, enabling complete control...

CVE-2024-45261

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user itself, which allows other users to potentially use it for authentication. Once an attacker bypasses the application's...

CVE-2024-45260

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it...

The vulnerability of the XMLPublisher component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain full control over the application.

The vulnerability of the XMLPublisher component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP protocol...

WordPress plugin WP Sessions Time Monitoring Full Automatic SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

CVE-2024-49681: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.0.9...

The vulnerability of the Junos OS Evolved operating system, related to bypassing authentication using a key, allows attackers to circumvent existing security restrictions, gain access to the system, and obtain full control over the device.

The vulnerability of the Junos OS Evolved operating system relates to bypassing authentication by using a password. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions, gain access to the system, and obtain full control over the device...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...