Command injection

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to...

CVE-2024-2352

1Panel up to 1.10.1-lts is affected by CVE-2024-2352 via command injection in the function baseApi.UpdateDeviceSwap (file /api/v1/toolbox/device/update/swap). The issue arises from untrusted input in the Path argument (example: 123123123\nopen -a Calculator), which can be exploited remotely. Publ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2024-2332

CVE-2024-2332 concerns SourceCodester Online Mobile Management Store 1.0. The vulnerability affects the HTTP GET Request Handler used by the /admin/maintenance/manage_category.php file, where manipulation of the argument id leads to SQL injection. Multiple connected records corroborate remote exp...

Buffer overflow

A vulnerability was found in SourceCodester Tourist Reservation System 1.0. It has been declared as critical. This vulnerability affects the function adwritedata of the file System.cpp. The manipulation of the argument adcode leads to buffer overflow. The attack can be initiated remotely. The...

CVE-2024-2331

CVE-2024-2331 affects SourceCodester Tourist Reservation System 1.0. The vulnerability is in the function ad_writedata of the file System.cpp, where manipulating the ad_code argument can cause a buffer overflow. The issue can be triggered remotely and, according to multiple sources, the exploit h...

CVE-2024-1870

CVE-2024-1870 affects the WordPress plugin Colibri Page Builder . The vulnerability is an unauthorized data modification issue caused by a missing capability check in the function calledActivateLicenseEndpoint, present in all versions up to and including 1.0.260. This allows authenticated attacke...

Sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-2330

CVE-2024-2330 affects Netentsec NS-ASG Application Security Gateway 6.3. The issue is a SQL injection in an unknown portion of /protocol/index.php triggered by manipulating the IPAddr parameter, permitting remote attack. Public disclosure exists; multiple feeds list the vulnerability and its CVSS...

Code injection

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

Sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/listresourceicon.php?action=delete. The manipulation of the argument IconId leads to sql injection. The attack may be...

CVE-2024-2329

CVE-2024-2329 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is a SQL injection in the unknown functionality of the endpoint /admin/list_resource_icon.php?action=delete, triggered by manipulating the IconId parameter. This is reported as exploitable remotely, with se...

CVE-2024-1767

The CVE-2024-1767 entry concerns the WordPress Blocksy theme. A stored XSS vulnerability exists in Blocksy blocks due to insufficient input sanitization and output escaping for user-supplied attributes such as className and radius, enabling authenticated attackers with contributor-level permissio...

CVE-2024-1125

EventPrime – Events Calendar, Bookings and Tickets (WordPress) is affected by CVE-2024-1125 due to a missing capability check in calendar_events_delete(), impacting all versions up to 3.4.3. This enables authenticated users with subscriber-level access and above to delete arbitrary posts. Affecte...

CVE-2024-1123

CVE-2024-1123 concerns the EventPrime – Events Calendar, Bookings and Tickets WordPress plugin. The vulnerability is a missing capability check in save_frontend_event_submission() across versions up to and including 3.4.2, enabling unauthorized data modification. Exploitation requires subscriber-...

CVE-2024-1320

EventPrime – Events Calendar, Bookings and Tickets for WordPress is vulnerable to Stored Cross-Site Scripting via the offline_status parameter in all versions up to 3.4.3 due to insufficient input sanitization and output escaping. The vulnerability allows unauthenticated attackers to inject scrip...

CVE-2024-1124

CVE-2024-1124 concerns EventPrime – Events Calendar, Bookings and Tickets for WordPress. Multiple connected sources confirm the vulnerability exists in all versions up to and including 3.4.1, arising from a missing capability check in ep_send_attendees_email(), which permits authenticated attacke...

CVE-2024-25951

CVE-2024-25951 describes a command injection in Dell EMC iDRAC8 local RACADM. An authenticated user can execute commands to gain control of the underlying OS. Affected are iDRAC8 versions prior to 2.85.85.85; remediation is to update to 2.85.85.85 or later (per DSA-2024-089). Other sources corrob...

Code injection

jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens JWT, JSON Web Signature JWS, JSON Web Encryption JWE, JSON Web Key JWK, JSON Web Key Set JWKS, and more. A vulnerability has been identified in the JSON Web Encryption JWE decryption interfaces...

CVE-2024-28122

CVE-2024-28122 (JWx) is a DoS vulnerability in the Go JOSE library (jwx) where an attacker with a trusted public key can craft a JWE with an exceptionally high compression ratio to exhaust resources. The issue affects the JWx modules and has been patched in versions 1.2.29 and 2.0.21. Public deta...