4971 matches found
CVE-2024-49331
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System allows Upload a Web Shell to a Web Server.This issue affects Property Lot Management System: from n/a through 4.2.38...
CVE-2024-49331
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server.This issue affects Property Lot Management System: from n/a through = 4.2.38...
CVE-2024-49331
CVE-2024-49331 documents an Unrestricted File Upload vulnerability in the WordPress Property Lot Management System plugin (
CVE-2024-49331 WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server.This issue affects Property Lot Management System: from n/a through = 4.2.38...
CVE-2024-49331 WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Property Lot Management System plms allows Upload a Web Shell to a Web Server.This issue affects Property Lot Management System: from n/a through = 4.2.38...
Acronym Overdose – Navigating the Complex Data Security Landscape
In the modern enterprise, data security is often discussed using a complex lexicon of acronyms—DLP, DDR, DSPM, and many others. While these acronyms represent critical frameworks, architectures, and tools for protecting sensitive information, they can also overwhelm those trying to piece together...
WordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by CTRL - Chance Patchstack Alliance in WordPress Plugin Property Lot Management System versions = 4.2.38...
SUSE CVE-2024-21535
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting XSS via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown...
WordPress Property Lot Management System Plugin <= 4.2.38 is vulnerable to Arbitrary File Upload
Software Property Lot Management System Type Plugin Vulnerable versions = 4.2.38 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-49331 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 5524e01a8194 Credits CTRL Chance Required...
MAL-2024-9900 Malicious code in utils-define-nonenumerable-read-only-property (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in utils-define-nonenumerable-read-only-property (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9770 Malicious code in plugin-transform-unicode-property-regex (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-unicode-property-regex (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in plugin-transform-private-property-in-object (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9769 Malicious code in plugin-transform-private-property-in-object (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-9972
Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2024-9972 ChanGate Property Management System - SQL Injection
Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2024-9972
The CVE entry CVE-2024-9972 concerns the ChanGate Property Management System, which has a SQL Injection vulnerability allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. The related documents identify the affected product and t...
CVE-2024-9972 ChanGate Property Management System - SQL Injection
Property Management System from ChanGate has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2024-21535
A flaw was found in markdown-to-jsx. This vulnerability allows an attacker to execute arbitrary code via Cross-site scripting XSS through the src property by injecting a malicious iframe element into the markdown. Mitigation Mitigation for this issue is either not available or the currently...