CVE-2024-6448

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6448 Mollie Payments for WooCommerce <= 7.7.0 - Unauthenticated Full Path Disclosure

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6448

CVE-2024-6448 affects Mollie Payments for WooCommerce for WordPress. All versions up to 7.7.0 expose information due to error reporting being enabled by default in multiple plugin files, allowing unauthenticated attackers to obtain the full path to the WordPress instance. The disclosure is descri...

WordPress Mollie Payments for WooCommerce plugin <= 7.7.0 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Mollie Payments for WooCommerce versions = 7.7.0...

Malicious code in @isp-frontend-library/melidata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82746032892e802ace53b17af4c8d10cca1a7c07e3908a3a058be62eb64fe9ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-confusion-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229d38e7d2d3105bfcd37f65885ebaebcf9746721aba7bdec84e88810b454ee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6543 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal versions 11.x-dev Description: The issue is related to a Full Path Disclosure flaw in the core/authorize.php file of the Drupal CMS system. This flaw allows an attacker to disclose system data without authorization. The vulnerability c...

CVE-2024-6448: Exposure of Sensitive Information to an Unauthorized Actor

The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default in multiple plugin files. This makes it possible for unauthenticated attackers to obtain the full...

CVE-2024-6053: Exposure of Private Personal Information to an Unauthorized Actor

Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can lead to unintentional sharing of the clipboard with the current presenter of a meeting...

WordPress Mollie Payments for WooCommerce Plugin <= 7.7.0 is vulnerable to Full Path Disclosure (FPD)

Software Mollie Payments for WooCommerce Type Plugin Vulnerable versions = 7.7.0 Fixed in 7.8.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Full Path Disclosure FPD CVE CVE-2024-6448 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 442e1f30b6d2 Credits...

WordPress plugin Mollie Payments for WooCommerce 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

CVE-2024-8207

In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server...

PT-2024-5918 · Teamviewer · Teamviewer Full Client +1

Name of the Vulnerable Software and Affected Versions: TeamViewer Full Client versions prior to 15.57 TeamViewer Meeting versions prior to 15.55.3 Description: The issue is related to improper access control in the clipboard synchronization feature. This can lead to unintentional sharing of the...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server version 5.0 up to and including version 5.0.14...

Malicious code in digital-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9021abdb0634436cdfe28f725d1af0444e6737f285c2f2bcfe82a0b9e0359979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @digital-experience/product (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c435487f72fee4bd3fad67cf95fb62296a2a78c8e5f4079e9e40dd35493753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WordPress Button Plugin MaxButtons plugin <= 9.7.8 - Full Path Disclosure vulnerability

Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin MaxButtons versions = 9.7.8...

MAL-2024-8032 Malicious code in eslint-config-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fda3631232466ff38fcdeac8d90d36bcfb72f632a3055055d5e0b19ef17b500b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8036 Malicious code in platform-client-messaging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the SonicOS operating system’s network interface allows attackers to gain full access to the network interface.

The vulnerability of the SonicOS operating system’s network interface controllers related to SonicWall’s network interface controllers involves access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain full access to the network interface controller...