WordPress MoveTo Plugin <= 6.2 is vulnerable to SQL Injection

Software MoveTo Type Plugin Vulnerable versions = 6.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25910 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 376a551a56e9 Credits Dave Jong Patchstack Required privilege Unauthenticated...

WordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File Upload

Software MoveTo Type Plugin Vulnerable versions = 6.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-25913 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 08fbe7e305e7 Credits Dave Jong Patchstack Required privilege Unauthenticat...

WordPress MoveTo Plugin <= 6.2 is vulnerable to Settings Change

Software MoveTo Type Plugin Vulnerable versions = 6.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Settings Change CVE CVE-2024-25912 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID b88d3d6ad2fe Credits Dave Jong Patchstack Required privilege...

dlplibs:key6fuzzer: Segv on unknown address in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

Detailed Report: https://oss-fuzz.com/testcase?key=5752428626706432 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: key6fuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Adobe Flash - Drawing Methods 'this' Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=388&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There are use-after frees realated to storing a single pointer this this pointer in several MovieClip drawing methods, including beginFill,...