PT-2024-39559 · WordPress · Apppresser

Name of the Vulnerable Software and Affected Versions: The AppPresser – Mobile App Framework plugin for WordPress versions up to, and including, 4.4.4 Description: The issue is related to privilege escalation via account takeover. This is due to the appp reset password and validate reset password...

CVE-2024-9894

A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

net: hns3: fix a deadlock problem when config TC during resetting

...

PT-2024-39920 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the reset.php file, where the manipulation of the useremail argument leads to sql injection. This allows for remote attacks. The exploit has been disclosed...

Code-Projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which originates from a SQL injection vulnerability in the useremail parameter of the reset.php file...

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

CVE-2024-6657

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

CVE-2024-6657 BLE peripheral DoS after few cycles of connect/disconnects

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

CVE-2024-6657

CVE-2024-6657 affects Siemens Sentron Powercenter 1000/1100 BLE subsystem. A denial-of-service can occur in a BLE network when multiple central devices repeatedly connect/disconnect to a peripheral, with recovery requiring a hard reset. The DoS is linked to synchronization errors in the BLE compo...

CVE-2024-6657 BLE peripheral DoS after few cycles of connect/disconnects

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device...

PT-2024-9466 · Siemens · Sentron Powercenter 1000/1100

Name of the Vulnerable Software and Affected Versions: Sentron Powercenter 1000/1100 affected versions not specified Description: A denial of service issue may occur in a BLE network when multiple central devices continuously connect and disconnect to a peripheral device, requiring a hard reset t...

CentOS 7 : containernetworking-plugins (RHSA-2020:0406)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0406 advisory. - Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/...

Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)

Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a default installation, commands will ge...

GHSA-RRQC-C2JX-6JGV Django allows enumeration of user e-mail addresses

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...

CVE-2024-45231

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...

DEBIAN-CVE-2024-45231

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...

CVE-2024-45231

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...

CVE-2024-45231

Django CVE-2024-45231: Affects Django v5.1.1, v5.0.9, and v4.2.16. PasswordResetForm could reveal user email addresses during password-reset attempts when email sending fails, allowing remote enumeration through response outcomes. Public details in Debian/IBM advisories confirm exploitation requi...

CVE-2024-45231

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...