CVE-2024-27957

Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1...

CVE-2024-27957

CVE-2024-27957 is an Unauthenticated Arbitrary File Upload in Pie Register (Registration Forms plugin). Affected versions: up to 3.8.3.1. The NVD/Wordfence data confirm a high-severity impact (unrestricted file upload) with no patch status reported in the provided materials; exploitation status n...

CVE-2024-27957 WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1...

CVE-2024-27957 WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1...

PT-2024-22161 · Unknown · Pie Register

Name of the Vulnerable Software and Affected Versions: Pie Register versions 3.8.3.1 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register. This allows for the upload of files with potentially dangerous types, which could...

WordPress Plugin Registration Forms Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

Information Exposure

IntelR AtomR Processors are vulnerable to information exposure through microarchitectural state after transient execution. The vulnerability is due to certain register files, which, when accessed by an authenticated user, may potentially enable information disclosure via local access...

CVE-2024-2478

A vulnerability was found in BradWenqiang HR 2.0. It has been rated as critical. Affected by this issue is the function selectAll of the file /bishe/register of the component Background Management. The manipulation of the argument userName leads to sql injection. The attack may be launched...

DEBIAN-CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2024-20557 · Unknown · Bradwenqiang Hr

Name of the Vulnerable Software and Affected Versions: BradWenqiang HR version 2.0 Description: A critical issue affects the selectAll function of the /bishe/register file in the Background Management component. The manipulation of the userName argument leads to SQL injection. This issue can be...

WordPress Plugin Wp Social Login and Register Social Counter Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Pie Register Plugin <= 3.8.3.2 is vulnerable to Arbitrary File Upload

Software Pie Register Type Plugin Vulnerable versions = 3.8.3.2 Fixed in 3.8.3.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-27957 Patch priority High CVSS severity High 10 Developer Claim ownership PSID a371b236f7d1 Credits Rafie Muhammad Patchstack Required...

YourSpotify Security Breach

YourSpotify is a self-hosted Spotify tracking dashboard. A security vulnerability exists in versions of YourSpotify prior to 1.9.0 that stems from vulnerability to clickjacking, allowing other users to register or delete the current user account...

x86: Register File Data Sampling

ISSUE DESCRIPTION Intel have disclosed RFDS, Register File Data Sampling, affecting some Atom cores. This came from internal validation work. There is no information provided about how an attacker might go about inferring data from the register files. For more details, see:...

Intel: CVE-2023-28746 Register File Data Sampling (RFDS)

This CVE was assigned by Intel. Please see CVE-2023-28746 on CVE.org for more information...

The vulnerability of the check_stack_write_fixed_off() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the checkstackwritefixedoff function in the kernel/bpf/verifier.c module of the Linux operating system is related to incorrect register checking. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s MTD driver kernel relates to the assignment of a null pointer in the functions registermtdblktrans and blktransnotifyadd in the drivers/mtd/mtdblkdevs.c module. Exploiting this vulnerability could allow an attacker to trigger a service failure...