109 matches found
Confluence Migrator Application 信息泄露漏洞
Confluence Migrator Application is an open source migrator application from XWiki SAS. An information disclosure vulnerability exists in Confluence Migrator Application versions prior to 1.11.7. An attacker can exploit this vulnerability to obtain sensitive information...
CVE-2024-33913
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-3551 Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
The Penci Soledad Data Migrator plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.0 via the 'data' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any...
CVE-2024-3551
CVE-2024-3551 affects the Penci Soledad Data Migrator plugin for WordPress. It allows Local File Inclusion via the data parameter in all versions up to 1.3.0, enabling unauthenticated attackers to include and execute PHP files on the server, bypassing access controls and potentially leading to co...
WordPress Penci Soledad Data Migrator plugin <= 1.3.0 - Unauthenticated Local File Inclusion vulnerability
Unauthenticated Local File Inclusion vulnerability discovered by M.Awad in WordPress Plugin Penci Soledad Data Migrator versions = 1.3.0...
WordPress Penci Soledad Data Migrator Plugin <= 1.3.0 is vulnerable to Local File Inclusion
Software Penci Soledad Data Migrator Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3551 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 00732af89875 Credits M.Awad Required privilege...
WordPress Plugin Penci Soledad Data Migrator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Penci Soledad Data Migrator < 1.3.1 - Unauthenticated Local File Inclusion
Description The Penci Soledad Data Migrator plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.0 via the 'data' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...
CVE-2024-33913
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913
CVE-2024-33913 is a CSRF to Arbitrary File Upload vulnerability in the Xserver Migrator WordPress plugin. The issue affects Xserver Migrator versions from <= 1.6.1 (per initial description) and is confirmed as being patched in newer builds (patched status in connected CVE references; Xserver M...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
PT-2024-25546 · Unknown · Xserver Migrator
Name of the Vulnerable Software and Affected Versions: Xserver Migrator versions 1.6.1 and earlier Description: A Cross-Site Request Forgery CSRF issue leads to Arbitrary File Upload in Xserver Migrator. This allows an attacker to potentially upload arbitrary files. Recommendations: For versions...
WordPress plugin Xserver Migrator 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
WordPress Xserver Migrator plugin <= 1.6.2 - CSRF to Arbitrary File Upload vulnerability
CSRF to Arbitrary File Upload vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Xserver Migrator versions = 1.6.2...
WordPress Xserver Migrator Plugin <= 1.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Xserver Migrator Type Plugin Vulnerable versions = 1.6.2 Fixed in 1.6.2.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-33913 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID 9b9ea870058c Credits Dimas Maulana...
This Week in Spring - October 4th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Its October 4th, 2022, and Im in Austin, TX, for the new version of show formerly known as the Kafka Summit, here to talk to folks about the amazing opportunities for Spring Boot and Apache Kafka. On the 12th, Ill be in...
zeroswap/UniswapV2Pair.sol Token reserves per lp token can be manipulated due to lack of MINIMUM_LIQUIDITY when minting the first liquidity with migrator
Lines of code Vulnerability details if totalSupply == 0 address migrator = IUniswapV2Factoryfactory.migrator; if msg.sender == migrator liquidity = IMigratormigrator.desiredLiquidity; requireliquidity 0 && liquidity != uint256-1, "Bad desired liquidity"; else requiremigrator == address0, "Must no...
MAL-2022-3945 Malicious code in iotc-migrator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf94e9627957c6949eee5101160a5bd3cdd1c3344b104a43d994d765f8d89dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in iotc-migrator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf94e9627957c6949eee5101160a5bd3cdd1c3344b104a43d994d765f8d89dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...