397 matches found
CVE-2024-30533
CVE-2024-30533 affects Layouts for Elementor (WordPress) — Unrestricted Upload of File with Dangerous Type in Layouts for Elementor: vulnerable on 1.x releases before 1.8 due to unauthenticated arbitrary file upload. Patch exists in 1.8; apply the update to mitigate. CVSSv3.1 base score 7.5 (I/H,...
PT-2024-23462 · Elementor · Layouts For Elementor
Name of the Vulnerable Software and Affected Versions: Layouts for Elementor versions prior to 1.8 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the functionality of the software. No information is provided about the estimated number of...
WordPress Layouts for Elementor plugin < 1.8 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Layouts for Elementor versions 1.8...
WordPress Layouts for Elementor Plugin < 1.8 is vulnerable to Arbitrary File Upload
Software Layouts for Elementor Type Plugin Vulnerable versions 1.8 Fixed in 1.8 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Upload CVE CVE-2024-30533 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID f5141cd380b2 Credits Abdi Pranata Required...
[SECURITY] Fedora 40 Update: treelayout-1.0.3-23.fc40
Efficiently create compact, highly customizable tree layouts. The software builds tree layouts in linear time; i.e., even trees with many nodes are built quickly...
BIT-TYPO3-2021-32669
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When settings for backend layouts are not properly encoded, the corresponding grid view is vulnerable to...
BIT-ARTIFACTORY-2021-45730
JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators...
How to Implement a Secure Incident Response Plan
Understanding the Basics of Secure Incident Response Plan A proactive strategy for coping with digital dangers calls for a well-planned process that can neutralize and diminish the harmful aftermath of unauthorized intrusion attempts and neglect of security principles. The primary aim of this...
Texas School Safety Software Data Leak Endangers Student Safety
By Deeba Ahmed From Background Checks to Bedroom Layouts: Data Leak Strips Bare School Security System. This is a post from HackRead.com Read the original post: Texas School Safety Software Data Leak Endangers Student Safety...
October Code Injection Vulnerability
October is an open source Content Management System CMS and web platform from October. October is vulnerable to a code injection vulnerability that originates when "editor.cmspages", "editor.cmslayouts" or "editor.cmsparticles" is enabled with "cms.safemode". editor.cmspages", "editor.cmslayouts"...
PT-2023-29217 · October · October
Name of the Vulnerable Software and Affected Versions: October versions prior to 3.4.15 Description: The issue allows an authenticated backend user with the editor.cms pages, editor.cms layouts, or editor.cms partials permissions to write specific Twig code and execute arbitrary PHP, despite...
MAL-2023-8441 Malicious code in mux-spaces-broadcast-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mux-spaces-broadcast-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Heap OOB Read
Environment bash Distributor ID: Debian Description: Debian GNU/Linux bookworm/sid Version I checked against the latest release as of 09/28/23 the current master branch at commit c5603fa8de0e7d4460718e28f90989ffdf925494 . Description This AddressSanitizer output is indicating an OOB read of inval...
WordPress BlogPost - BlogPost Widgets - Amazing Blog Layouts Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
Software BlogPost - BlogPost Widgets - Amazing Blog Layouts Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 694940615fc3 Credits Rafie...
WordPress PremiumBlogAddons - Premium Blog Addons - Amazing Blog Layouts Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software PremiumBlogAddons - Premium Blog Addons - Amazing Blog Layouts Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 80de45e262...
Design/Logic Flaw
In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...
CVE-2023-37307
CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...
