4767 matches found
Stay safe with Wiz's winning hand for securing Kubernetes
Ensure that your Kubernetes environments are secure and follow OWASP's Kubernetes Top 10 framework. Generate reports quickly and easily and remediate any issues with actionable insights...
CVE-2024-4040
creationtimestamp| type| source ---|---|--- 2024-04-23 12:01:56+00:00| seen| https://t.me/ctinow/216024 2024-04-23 12:36:17+00:00| published-proof-of-concept| https://t.me/CNArsenal/2367 2024-04-24 08:26:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7154 2024-04-24...
[SECURITY] Fedora 38 Update: cockpit-311.2-1.fc38
The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...
CVE-2024-30985
SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...
CVE-2024-26851 netfilter: nf_conntrack_h323: Add protection for bmp length out of range
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: Add protection for bmp length out of range UBSAN load reports an exception of BRK5515 SHIFTISSUE:Bitwise shifts that are out of bounds for their data type. vmlinux getbitmapb=75 + 712 vmlinux...
CVE-2024-26834 netfilter: nft_flow_offload: release dst in case direct xmit path is used
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: release dst in case direct xmit path is used Direct xmit does not use it since it calls devqueuexmit to send packets, hence it calls dstrelease. kmemleak reports: unreferenced object 0xffff88814f440900...
WP Client Reports < 1.0.23 - Cross-Site Request Forgery
Description The WP Client Reports plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.22. This is due to missing or incorrect nonce validation on the wpclientreportssendemailreportfromajax function. This makes it possible for unauthenticated...
CVE-2024-30985
SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...
CVE-2024-30985
SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...
CVE-2024-32439
Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports.This issue affects WP Client Reports: from n/a through 1.0.22...
CVE-2024-32439
Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports.This issue affects WP Client Reports: from n/a through 1.0.22...
CVE-2024-32439 WordPress WP Client Reports plugin <= 1.0.22 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports.This issue affects WP Client Reports: from n/a through 1.0.22...
CVE-2024-32439
Technical details about CVE-2024-32439 are not publicly provided in the connected documents. Monitor vendor advisories and security feeds for updates.
CVE-2024-32439 WordPress WP Client Reports plugin <= 1.0.22 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports.This issue affects WP Client Reports: from n/a through 1.0.22...
SQL Injection
mautic/core is vulnerable to SQL Injection. The vulnerability is due to improper sanitization of user-supplied input within the Reports bundle. An attacker can retrieve and alter sensitive data, including login credentials, and depending on database permissions, manipulate file systems by injecti...
PT-2024-24569 · Switchwp · Wp Client Reports
Name of the Vulnerable Software and Affected Versions: WP Client Reports versions 1.0.22 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in SwitchWP WP Client Reports. This type of vulnerability allows an attacker to trick a user into performing unintended...
WordPress Plugin WP Client Reports 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
GHSA-JJ6W-2CQG-7P94 Mautic SQL Injection in dynamic Reports
Impact Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems. Patches Update t...
Mautic SQL Injection in dynamic Reports
Impact Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems. Patches Update t...