CVE-2023-39306

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Fusion Builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39306 WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeFusion Fusion Builder allows Reflected XSS.This issue affects Fusion Builder: from n/a through 3.11.1...

CVE-2023-39306

CVE-2023-39306 affects WordPress plugin Fusion Builder up to version 3.11.1. The issue is an authenticated/unauthenticated reflected Cross-Site Scripting (XSS) vulnerability arising from improper input neutralization during web page generation. The vulnerability can be triggered via reflected inp...

WordPress Plugin Fusion Page Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-12798 · Themefusion · Fusion Builder

Name of the Vulnerable Software and Affected Versions: Fusion Builder versions prior to 3.11.2 Description: A Cross-Site Request Forgery CSRF issue affects the ThemeFusion Fusion Builder. This issue allows an attacker to perform unintended actions on a user's account. Recommendations: For version...

WordPress Plugin Fusion Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-12795 · Unknown · Fusion Builder

Name of the Vulnerable Software and Affected Versions: Fusion Builder versions through 3.11.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This can be exploited to execute...

VulnCheck KEV: CVE-2024-27972

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Very Good Plugins WP Fusion Lite allows Command Injection.This issue affects WP Fusion Lite: from n/a through 3.41.24...

WordPress WP Fusion Lite Plugin <= 3.41.24 is vulnerable to Remote Code Execution (RCE)

Software WP Fusion Lite Type Plugin Vulnerable versions = 3.41.24 Fixed in 3.42.10 OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-27972 Patch priority Medium CVSS severity Medium 9.9 Developer Very Good Plugins PSID 814e5262b633 Credits LVT-tholv2k Required...

PT-2024-2206

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2023.6 and 2021.12 and earlier Description Adobe ColdFusion is affected by an Improper Access Control issue. This flaw allows an unauthenticated attacker to gain access to sensitive files and perform arbitrary file...

Critical VMware Vulnerabilities Leading To Sandbox Escape

Summary: Critical vulnerabilities tracked as CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, and CVE-2024-22255 have been addressed by Vmware. These vulnerabilities allow attackers to bypass virtual machines and execute commands on the host machine. Workstation, Fusion, Cloud Foundation, and VMwa...

Patch now! VMWare escape flaws are so serious even end-of-life software gets a fix

VMWare has issued secuity fixes for its VMware ESXi, Workstation, Fusion, and Cloud Foundation products. It has even taken the unusual step of issuing updates for versions of the affected software that have reached thier end-of-life, meaning they would normally no longer be supported. This flaws...

Exploit for Server-Side Request Forgery in Fusion_Builder_Project Fusion_Builder

git clone https://github.com/s...

VMware Releases Security Advisory for Multiple Products

VMware released a security advisory to address multiple vulnerabilities in ESXi, Workstation, Fusion, and Cloud Foundation. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following VMwar...

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

VMware has released patches to address four security flaws impacting ESXi, Workstation, and Fusion, including two critical flaws that could lead to code execution. Tracked as CVE-2024-22252 and CVE-2024-22253, the vulnerabilities have been described as use-after-free bugs in the XHCI USB...

The vulnerability of USB controllers in VMware ESXi, Workstation, Fusion, and Cloud Foundation software allows a hacker to execute arbitrary code.

The vulnerability of USB controllers in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the UHCI controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products allows attackers to compromise protected information.

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of VMware ESXi, Workstation, Fusion, and Cloud Foundation software lies in the ability to write beyond the buffer boundaries, allowing attackers to increase their privileges.

The vulnerabilities of VMware ESXi, Workstation, Fusion, and Cloud Foundation software are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

The vulnerability of the UHCI controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software allows a attacker to execute arbitrary code.

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vulnerabilities fixed in VMware products

VMware has fixed several vulnerabilities in VMware ESXI, VMware Workstation and VMware Fusion. A malicious person with local administrator rights in a virtual machine can exploit the vulnerabilities to execute code - with the rights of the application - execute code on the system on which the...