Security update for vhostmd

This update for vhostmd fixes the following issues: Updated to version 1.2 Fix actions using the 'free' command Fix buffer accounting when generating metric XML Change actions to retrieve vendor and product info Add a 'unit' attribute to the metrics element vif-stats.py: convert to Python3 conf:...

PT-2024-27877 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns automated Windows patching with PowerShell. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2022-44513

creationtimestamp| type| source ---|---|--- 2024-12-18 23:32:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113676434955245115 2024-12-19 02:15:20+00:00| seen| https://t.me/cvedetector/13288 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

PT-2024-36236 · Hmd · Hmd

Name of the Vulnerable Software and Affected Versions: hmd versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into we...

PT-2025-3462 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.7.2 Description: The issue in Open5GS is related to the ogs dbi auth info function in the lib/dbi/subscription.c file, which is associated with unlimited resource allocation. This can be exploited by a remote attacker to cau...

CVE-2024-54353

Cross-Site Request Forgery CSRF vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through = 3.17...

CVE-2024-54353 WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through = 3.17...

CVE-2024-54353 WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through = 3.17...

CVE-2024-54353

CVE-2024-54353 is a CSRF-to-Stored XSS issue in the WordPress Hack-Info plugin (Hack-Info), affecting versions up to 3.17. The vulnerability’s description confirms Cross-Site Forgery to Stored Cross-Site Scripting. Red Hat and ENISA records corroborate the CVE entry; Wordfence notes the vulnerabi...

CVE-2024-56120

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2024-36328 · Unknown · Gaxx Keywords

Name of the Vulnerable Software and Affected Versions: Gaxx Keywords versions n/a through 0.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

WordPress plugin Hack-Info 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-54353: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wpgear Hack-Info hack-info allows Stored XSS.This issue affects Hack-Info: from n/a through = 3.17...

PT-2024-36239 · Unknown · Wpgear Hack-Info

Name of the Vulnerable Software and Affected Versions: WPGear Hack-Info versions n/a through 3.17 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

PT-2024-17662 · WordPress · The Tickera

Name of the Vulnerable Software and Affected Versions: The Tickera – WordPress Event Ticketing plugin versions up to, and including, 3.5.4.8 Description: The issue allows unauthenticated attackers to extract sensitive data from bookings, including full names, email addresses, check-in/out...

CVE-2023-35051

creationtimestamp| type| source ---|---|--- 2024-12-13 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113646755295744378...

CVE-2024-54345

creationtimestamp| type| source ---|---|--- 2024-12-13 17:26:44+00:00| seen| https://t.me/cvedetector/12876 2024-12-14 04:00:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113649176274740657...

SUSE CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

PT-2024-12337 · Google · Recaptcha

Name of the Vulnerable Software and Affected Versions: reCAPTCHA for all versions n/a through 1.22 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a through...

PT-2024-36112 · Unknown · Limit Login Attempts

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts versions n/a through 5.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...