CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

Rocket Software Rocket Zena 安全漏洞

Rocket Software Rocket Zena is a workload automation software from Rocket Software, USA. A security vulnerability exists in Rocket Software Rocket Zena version 4.4.1.26, which stems from improper handling of the filter parameter and can lead to SQL injection attacks...

CVE-2024-45955

CVE-2024-45955 affects Rocket Software Rocket Zena 4.4.1.26, vulnerable to SQL Injection via the filter parameter. The root cause is described as improper handling of the filter parameter, enabling SQL injection attempts. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) yields a base sco...

PT-2025-30610 · Rocket · Rocket Zena

Name of the Vulnerable Software and Affected Versions: Rocket Software Rocket Zena version 4.4.1.26 Description: Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection via the filter parameter. Recommendations: At the moment, there is no information about a newer version that...

rocket.chat Incorrect Authorization Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 3000 by default. The issue results from...

edu.berkeley.cs:rocket-dsptools_2.12 (>=1.2.0 <=1.2.6) potentially affected by CVE-2025-45006 via edu.berkeley.cs:rocketchip_2.12 (>=1.2.0-RC1 <=1.2.6)

edu.berkeley.cs:rocketchip2.12 MAVEN version =1.2.0-RC1, =1.2.0, =1.2.6 Source cves: CVE-2025-45006 Source advisory: SNYK:JAVA-EDUBERKELEYCS-11188144...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to improper retention of the mstatus.SUM bit, which remains set contrary to privileged specification constraints. An attacker can gain unauthorized access to physical memory by exploiting this improper...

CVE-2024-8270 macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements

The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control TCC policies, enabling the exploitation or abuse of permissions specified in its entitlements e.g., microphone, camera, automation, network client. Since Rocket.Chat was not...

Rocket.Chat 安全漏洞

Rocket.Chat is a chat program from Rocket.Chat, Inc. A security vulnerability exists in Rocket.Chat versions 7.6.1 and earlier, which stems from inefficient regular expression complexity due to incorrect manipulation of the parameter line in file...

CVE-2024-9697

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweetsettingssave and tweetsettingsupdate functions in all versions up to, and including, 1.3.4. This makes it possible for authenticated...

CVE-2024-9702

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2023-28357

A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking whether a user is a member of a given channel, leaking private channel members to unauthorized users. This allows authenticated users to enumerate whether a username is a membe...

CVE-2023-46067

Cross-Site Request Forgery CSRF vulnerability in Qwerty23 Rocket Font plugin = 1.2.3 versions...

CVE-2023-28318

A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the MessageKeepHistory or MessageShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices...

CVE-2023-23917

A prototype pollution vulnerability exists in Rocket.Chat server 5.2.0 that could allow an attacker to a RCE under the admin account. Any user can create their own server in your cloud and become an admin so this vulnerability could affect the cloud infrastructure. This attack vector also may...

CVE-2023-51407

Cross-Site Request Forgery CSRF vulnerability in Rocket Elements Split Test For Elementor.This issue affects Split Test For Elementor: from n/a through 1.6.9...

CVE-2023-3477

A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be...

CVE-2022-25026

A Server-Side Request Forgery SSRF in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy...