squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

squid: Squid: Denial of Service via crafted ESI response content

A flaw was found in Squid. When configured as a reverse proxy with Edge Side Includes ESI enabled, improper input validation and resource handling during the processing of ESI response content allow an upstream server to cause a Denial of Service DoS. By returning specially crafted ESI markup or...

CVE-2024-10352: Exposure of Sensitive Information to an Unauthorized Actor

The Magical Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the getcontenttype function in includes/widgets/content-reveal.php. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2024-45802

A flaw was found in Squid. Due to input validation and resource management issues, a denial of service may be triggered during the processing of certain Edge Side Includes ESI response content. Mitigation This bug was mitigated by the default upstream build configuration of Squid since version 6....

CVE-2024-9541: Exposure of Sensitive Information to an Unauthorized Actor

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authenticated attackers, with Contributor-level access...

PT-2024-39686

Name of the Vulnerable Software and Affected Versions The News Kit Elementor Addons plugin for WordPress version 1.2.1 and earlier Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, and draft Elementor template data...

CVE-2024-10129

A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/createshare.php of the component Share Handler. The manipulation of the argument fkey leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-10129: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/createshare.php of the component Share Handler. The manipulation of the argument fkey leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-9538: Exposure of Sensitive Information to an Unauthorized Actor

The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.8 via the 'render' function in includes/addons/wlfaq.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive...

CVE-2024-8910: Exposure of Sensitive Information Through Metadata

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmegaaccordion.php. This makes it possible for authenticated attackers, with Contributor-level...

Food Ordering Management System Security Vulnerabilities

Food Ordering Management System is a food ordering management system by the individual developer Carlo Montero. It provides an online platform to order food from a restaurant or fast food chain. A security vulnerability exists in Food Ordering Management System version 1.0, which stems from some...

CVE-2024-8711: Exposure of Information Through Directory Listing

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be...

PT-2024-39191 · Unknown · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Food Ordering Management System, affecting some unknown functionality of the file /includes/. This issue...

CVE-2024-8338

A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. Th...

Shudong-Share code issues and vulnerabilities

shudong-share is a free and open source PHP extranet system by AaronLiu. A code issue exists in version 2.4.7 of shudong-share, which stems from an unrestricted file upload in the file parameter of the /includes/fileReceive.php file of the File Extension Handler component...

CVE-2024-8338: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. Th...

PT-2024-38527

Name of the Vulnerable Software and Affected Versions OcoMon versions 4.0RC1 through 5.0RC1 Description A problematic issue has been found in the URL Handler component, specifically affecting the file /includes/common/require access recovery.php. This issue leads to cross site scripting, allowing...