CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53790

CVE-2024-53790 corresponds to a Local File Inclusion/path traversal issue in the WordPress Lenxel Core plugin for Lenxel(LNX) LMS (Lenxel Core). Public details in connected sources indicate vulnerable versions include Lenxel Core up to 1.2.5, with Patchstack citing fixes up to 1.2.8. The root cau...

CVE-2024-53790 WordPress Lenxel Core plugin <= 1.2.8 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ogun Labs Lenxel Core for LenxelLNX LMS lenxel-core allows PHP Local File Inclusion.This issue affects Lenxel Core for LenxelLNX LMS: from n/a through = 1.3.9...

CVE-2024-53809

Cross-Site Request Forgery CSRF vulnerability in Bob Namaste! LMS namaste-lms allows Cross Site Request Forgery.This issue affects Namaste! LMS: from n/a through = 2.6.4.1...

CVE-2024-53809

CVE-2024-53809 : A Cross-Site Request Forgery (CSRF) vulnerability affects the WordPress plugin Namaste! LMS (Kiboko Labs) up to version 2.6.4.1. The CVE entry notes exposure across Namaste! LMS versions ≤ 2.6.4.1 and lists a MEDIUM (CVSS v3.1: 4.3) impact. Connected sources repeatedly describe t...

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

The post CloudGoat Official Walkthrough Series: ‘sqsflagshop’ appeared first on Rhino Security Labs...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kiboko Labs Watu Quiz allows SQL Injection.This issue affects Watu Quiz: from n/a through 3.4.2...

CVE-2024-53792

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.1.2...

CVE-2024-52477

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

CVE-2024-52477 WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

CVE-2024-52477

CVE-2024-52477 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Document & Data Automation from No-nonsense Labs that leads to Stored XSS. Affected versions are prior to 1.6.1; remediation is to update to 1.6.1 or later. The CVSS v3.1 base score is 7.1 (HIGH), with NET...

CVE-2024-53792

CVE-2024-53792 concerns the Watu Quiz WordPress plugin. The vuln is an SQL Injection due to improper neutralization of special elements in SQL commands, affecting Watu Quiz versions n/a–3.4.2. Public materials indicate a fix/update is available: upgrade to a version later than 3.4.2. Some sources...

CVE-2024-53792 WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.1.2...

PT-2024-35317 · No Nonsense · Document & Data Automation

Name of the Vulnerable Software and Affected Versions: No-nonsense Labs Document & Data Automation versions prior to 1.6.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended...

PT-2024-35906 · Kiboko · Watu Quiz

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz versions n/a through 3.4.2 Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This can lead to unauthorized access and manipulation of data...

New “CleverSoar” Installer Targets Chinese and Vietnamese Users

CleverSoar Installer Used to Deploy Nidhogg Rootkit and Winos4.0 Framework Against Targeted Users In early November, Rapid7 Labs identified a new, highly evasive malware installer, 'CleverSoar,' targeting Chinese and Vietnamese-speaking victims. CleverSoar is designed to deploy and protect multip...

Wyze Cam 安全漏洞

Wyze Cam Wyze Labs is a series of cameras from Wyze USA. A security vulnerability exists in Wyze Cam v3, which stems from a lack of proper validation of the length of user-supplied data before copying it to a fixed-length stack-based buffer. An attacker exploiting this vulnerability could execute...

CVE-2024-52440

Deserialization of Untrusted Data vulnerability in xpresslane Xpresslane Fast Checkout xpresslane-integration-for-woocommerce allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through = 1.0.0...

CVE-2024-52440 WordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Bueno Labs Pvt. Ltd. Xpresslane Fast Checkout allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through 1.0.0...

CVE-2024-52440 WordPress Xpresslane Fast Checkout plugin <= 1.0.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xpresslane Xpresslane Fast Checkout xpresslane-integration-for-woocommerce allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through = 1.0.0...