CVE-2024-50527

CVE-2024-50527 affects the WordPress plugin Stacks Mobile App Builder (versions

PT-2024-34305 · Unknown · Stacks Mobile App Builder

Name of the Vulnerable Software and Affected Versions: Stacks Mobile App Builder versions n/a through 5.2.3 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For versions n/...

WordPress plugin Stacks Mobile App Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-50527: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Upload a Web Shell to a Web Server.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

PT-2024-34304

Name of the Vulnerable Software and Affected Versions: Stacks Mobile App Builder versions n/a through 5.2.3 Description: The issue allows the unrestricted upload of files with dangerous types, enabling attackers to upload malicious web shells to servers. This can lead to significant security risk...

CVE-2024-50528: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Retrieve Embedded Sensitive Data.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Stacks Mobile App Builder versions = 5.2.3...

WordPress Stacks Mobile App Builder Plugin <= 5.2.3 is vulnerable to Sensitive Data Exposure

Software Stacks Mobile App Builder Type Plugin Vulnerable versions = 5.2.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-50528 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID f961db867cb7 Credits stealthcopter...

WordPress Stacks Mobile App Builder Plugin <= 5.2.3 is vulnerable to Arbitrary File Upload

Software Stacks Mobile App Builder Type Plugin Vulnerable versions = 5.2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-50527 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 0f132ccd95a2 Credits stealthcopter Required privilege...

CVE-2024-50477

Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

CVE-2024-50477 WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

CVE-2024-50477 WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

CVE-2024-50477

CVE-2024-50477 affects WordPress plugin Stacks Mobile App Builder (versions

PT-2024-34253 · Unknown · Stacks Mobile App Builder

Name of the Vulnerable Software and Affected Versions: Stacks Mobile App Builder versions through 5.2.3 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing unauthorized access. Recommendations: For versions through 5.2.3, update to a version...

CVE-2024-50477: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through = 5.2.3...

WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability

Account Takeover vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Stacks Mobile App Builder versions = 5.2.3...

CVE-2024-9305

CVE-2024-9305 (AppPresser – Mobile App Framework, WordPress) affects the AppPresser plugin for WordPress, up to and including version 4.4.4. The root cause is weak access controls in the password-reset flow: appp_reset_password() and validate_reset_password() allow brute-forcing an OTP to change ...

CVE-2024-9305: Weak Password Recovery Mechanism for Forgotten Password

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.4. This is due to the apppresetpassword and validateresetpassword functions not having enough controls to prevent a successful brute forc...

TECNO com.transsion.aivoiceassistant 安全漏洞

TECNO com.transsion.aivoiceassistant is a mobile application from TECNO China. A security vulnerability exists in TECNO com.transsion.aivoiceassistant that stems from the presence of improperly controlled permissions, which can lead to the launch of any unexported component...

PT-2024-40243 · Saltcorn · Saltcorn

Name of the Vulnerable Software and Affected Versions: Saltcorn version 1.0.0-beta.13 Description: A user with admin permission can read arbitrary file and directory names on the filesystem by calling the "/build-mobile-app/result" endpoint. The build dir name parameter is not properly validated...