29388 matches found
PT-2024-33464 · Unknown · Sourav All In One Slider
Name of the Vulnerable Software and Affected Versions: Sourav All in One Slider versions n/a through 1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited by...
PT-2024-33473 · Myriad Solutionz · Myriad Solutionz Property Lot Management System
Name of the Vulnerable Software and Affected Versions: Myriad Solutionz Property Lot Management System versions n/a through 4.2.38 Description: The issue allows hackers to upload malicious files, exploiting an Unrestricted File Upload vulnerability. This enables the upload of a web shell to a web...
PT-2024-33465 · Sovratec · Sovratec Case Management
Name of the Vulnerable Software and Affected Versions: Sovratec Case Management versions n/a through 1.0.0 Description: The issue allows an attacker to upload a web shell to a web server, which can lead to further exploitation. This is due to an Unrestricted Upload of File with Dangerous Type...
CVE-2024-10133
A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to sql injection. The attack can b...
OESA-2024-2277 libyaml security update
$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...
CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...
CVE-2023-39593
Insecure permissions in the sysexec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...
Malicious code in yogergerherhme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364b3cb8f528aa44006944727caef3a2de94ca68d931e97cd82abcb3f2bc8197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
rar slip lead to remote code execution
This report is not public...
MAL-2024-9360 Malicious code in down-load-available-zip-now-23630-non-stop-je-te-plie-en-deux-6jxm0-xjqkwj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 382006e2345d556d86f24dd65c61ef384292eebd06018746c90fcb445fb9f06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in new-al-bum-av-ailable-35600-lived-to-tell-bt7g4-oftaau (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327dba2f98c7d7cb3d700ac2b74867d1a0e1fc93e5b8c07cd825dc020c6fc4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in a-lbum-do-wnload-avai-lable-file-2016-44588-my-wild-west-fzmj0-gpjzue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d227e690fcb2c6fa40eb050274026415cc858c76009d5e255816dae180ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in file-alb-um-zip-new-mp3-36289-laru-beya-zk5v7-mtjfsf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e51de7cd47ffcc09a50becd32ea8305fd92871ccb12feaec517cd87f1f2eb811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ava-ilable-down-load-mp3-today-50529-lets-change-the-world-with-music-cx2zi-xhskuv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df195ac8737511909f9fe9908cbb3c0cc9287f38837903e901667ca3ac686141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-45844
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Malicious code in plugin-not-found (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in do-not-install-ecb1029ca (npm)
--- -= Per source details. Do not edit below this line.=-...