WordPress Penci Soledad Data Migrator Plugin <= 1.3.0 is vulnerable to Local File Inclusion

Software Penci Soledad Data Migrator Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3551 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 00732af89875 Credits M.Awad Required privilege...

Penci Soledad Data Migrator < 1.3.1 - Unauthenticated Local File Inclusion

Description The Penci Soledad Data Migrator plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.0 via the 'data' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2024-33913

Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...

CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...

CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...

CVE-2024-33913

CVE-2024-33913 is a CSRF to Arbitrary File Upload vulnerability in the Xserver Migrator WordPress plugin. The issue affects Xserver Migrator versions from &lt;= 1.6.1 (per initial description) and is confirmed as being patched in newer builds (patched status in connected CVE references; Xserver M...

WordPress plugin Xserver Migrator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2024-25546 · Unknown · Xserver Migrator

Name of the Vulnerable Software and Affected Versions: Xserver Migrator versions 1.6.1 and earlier Description: A Cross-Site Request Forgery CSRF issue leads to Arbitrary File Upload in Xserver Migrator. This allows an attacker to potentially upload arbitrary files. Recommendations: For versions...

WordPress Xserver Migrator plugin <= 1.6.2 - CSRF to Arbitrary File Upload vulnerability

CSRF to Arbitrary File Upload vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Xserver Migrator versions = 1.6.2...

WordPress Xserver Migrator Plugin <= 1.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Xserver Migrator Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-33913 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID 9b9ea870058c Credits Dimas Maulana...

This Week in Spring - October 4th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! Its October 4th, 2022, and Im in Austin, TX, for the new version of show formerly known as the Kafka Summit, here to talk to folks about the amazing opportunities for Spring Boot and Apache Kafka. On the 12th, Ill be in...

zeroswap/UniswapV2Pair.sol Token reserves per lp token can be manipulated due to lack of MINIMUM_LIQUIDITY when minting the first liquidity with migrator

Lines of code Vulnerability details if totalSupply == 0 address migrator = IUniswapV2Factoryfactory.migrator; if msg.sender == migrator liquidity = IMigratormigrator.desiredLiquidity; requireliquidity 0 && liquidity != uint256-1, "Bad desired liquidity"; else requiremigrator == address0, "Must no...

Malicious code in iotc-migrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf94e9627957c6949eee5101160a5bd3cdd1c3344b104a43d994d765f8d89dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3945 Malicious code in iotc-migrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf94e9627957c6949eee5101160a5bd3cdd1c3344b104a43d994d765f8d89dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-38303

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...

CVE-2021-38303

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...

Sql injection

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...

CVE-2021-38303

CVE-2021-38303 involves a SQL injection in Sureline SUREedge Migrator 7.0.7.29360. The vulnerability allows an attacker to execute arbitrary SQL commands via the affected component, with high/severe impact as reflected in CVSS data (CRITICAL/9.8 for CVSS 3.1; High/7.5 for CVSS 2.0). Root cause is...

CVE-2021-38303

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...

Sureline Systems Sureline Sureedge Migrator SQL注入漏洞

Sureline Systems Sureline Sureedge Migrator is a proven mobile software appliance for enterprise applications from Sureline Systems, Inc. It is used to migrate complete workloads to the cloud, thus helping customers to rapidly modernize their infrastructure. Sureline SUREedge Migrator suffers fro...