Fedora: Security Advisory (FEDORA-2024-6dedbc5cf9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-7db9258d37)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: curl (CVE-2024-6197_-_A)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6197-A advisory. - NIST NVD Details CVE-2024-6197 Note that Nessus has not tested for this issue but has instead relied only on...

CVE-2024-22303

CVE-2024-22303 is an Incorrect Privilege Assignment vulnerability in the favethemes Houzez WordPress theme (affected versions “n/a through 3.2.4”). The issue allows Privilege Escalation for authenticated users (Subscriber+). CVSS v3.1 base score 8.8 (HIGH) with network exposure, low attack comple...

CVE-2024-21743

CVE-2024-21743 is a Privilege Escalation in the favethemes Houzez Login Register WordPress plugin (houzez-login-register) affecting versions ≤ 3.2.5. The issue enables authenticated users (Subscriber level) to escalate privileges, effectively via an account takeover vector; it is described as a S...

Fedora: Security Advisory (FEDORA-2024-f7f36c20a2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ASIS 3.2.0 SQL Injection Vulnerability

Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

Exploit for Code Injection in Sqlpad

SQLPad RCE Exploit This repository contains an exploit script...

Fedora: Security Advisory (FEDORA-2023-3dd938a14d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-48aa5f1dae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-55247f3a4f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-654e0ddfd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-46809

CVE-2023-46809 affects Node.js runtimes that bundle an unpatched OpenSSL or use a dynamically linked OpenSSL version; exposed to the Marvin Attack when PKCS #1 v1.5 padding is allowed during RSA decryption with a private key. This is a timing/side-channel vulnerability affecting confidentiality a...

CVE-2023-39333

CVE-2023-39333 : Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may access data and functions that the WebAssembly module itself cannot access, effectively behaving like a JavaScript module. Affected software: Node.js on any active...

CVE-2023-30582

CVE-2023-30582: In Node.js (version 20) under the experimental permission model, using --allow-fs-read with a non-* argument enables monitoring of files via fs.watchFile, bypassing read restrictions. This is tied to an incomplete permission model. The connected IBM bulletin references Spectrum Co...

CVE-2023-30587

CVE-2023-30587: Node.js 20 inspector-based bypass allows an attacker to modify the Worker’s isInternal value when an inspector attaches inside the Worker constructor before initializing WorkerImpl, bypassing the experimental permission model. Affected: Node.js users using the permission model mec...

CVE-2023-30584

CVE-2023-30584 affects Node.js 20 with the experimental permission model. It describes a path traversal bypass in how file permissions are verified due to improper handling within the experimental permission model. The vulnerability is described as local with high confidentiality and integrity im...

CVE-2023-30583

CVE-2023-30583 : In Node.js 20, the fs.openAsBlob() API can bypass the experimental permission model when the file system read restriction is enabled with --allow-fs-read, due to a missing check in fs.openAsBlob(). The description notes this as part of the experimental feature set. Remediation/fi...

openSUSE Security Advisory (SUSE-SU-2024:3162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2024-248-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...