GHSA-JCRP-X7W3-FFMG Deep Java Library path traversal issue

Summary Deep Java Library DJL is an open-source, high-level, engine-agnostic Java framework for deep learning. DJL is designed to be easy to get started with and simple to use for Java developers. DJL provides a native Java development experience and functions like any other regular Java library...

Deep Java Library path traversal issue

Summary Deep Java Library DJL is an open-source, high-level, engine-agnostic Java framework for deep learning. DJL is designed to be easy to get started with and simple to use for Java developers. DJL provides a native Java development experience and functions like any other regular Java library...

WordPress Monetag Official Plugin plugin <= 1.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Monetag Official Plugin versions = 1.1.3...

PT-2025-4075

Name of the Vulnerable Software and Affected Versions Deep Java Library DJL versions 0.1.0 through 0.31.0 Description A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library DJL on all platforms allows a bad actor to write files to arbitrary locations. This issue exists d...

GHSA-R5PH-XG7Q-XFRP

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

CVE-2024-13061

The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary user...

CVE-2024-11462

The Filestack Official plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fstab' and 'filestackoptions' parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

CVE-2024-11462

CVE-2024-11462 affects the Filestack WP Upload (Filestack Official) WordPress plugin. It enables Reflected XSS via the fstab and filestack_options parameters in all versions up to 2.0.0, exploitable by unauthenticated attackers who lure a user into executing an action. Connected Red Hat entry rep...

CVE-2024-11462 Filestack Official <= 2.1.0 - Reflected Cross-Site Scripting

The Filestack Official plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fstab' and 'filestackoptions' parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

WordPress plugin Filestack Official 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

CVE-2024-11317

creationtimestamp| type| source ---|---|--- 2024-12-05 12:52:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113600310424048169 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-01...

CVE-2024-54132

The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from ...

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

The post CloudGoat Official Walkthrough Series: ‘sqsflagshop’ appeared first on Rhino Security Labs...

CVE-2024-11332

creationtimestamp| type| source ---|---|--- 2024-11-23 04:37:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113530416388183575...

CVE-2024-52450

CVE-2024-52450 describes an Unauthenticated Local File Inclusion in the WordPress plugin “nBlocks” (versions up to and including 1.0.2) caused by improper control of filenames in PHP Include/Require statements. Public sources in the Connected documents confirm the issue affects nBlocks from n/a t...

CVE-2024-9500

creationtimestamp| type| source ---|---|--- 2024-11-15 21:32:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113489106199086702 2024-11-16 00:09:56+00:00| seen| https://t.me/cvedetector/11191...

CVE-2024-51687

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

CVE-2024-51687 WordPress Platform.ly Official plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Platform.ly Platform.ly Official platformly allows Stored XSS.This issue affects Platform.ly Official: from n/a through = 1.1.3...

CVE-2024-51687

CVE-2024-51687 is a CSRF to Stored XSS vulnerability in WordPress Platform.Ly Official (versions up to 1.1.3). The issue can affect authenticated or unauthenticated users depending on context and has a high CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). The root cause is cross...

WordPress plugin Platform.Ly Official 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...