Malicious code in active-admin_globalize3_locale_selector (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in language-selector-content (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2593 Malicious code in language-selector-content (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2013 Malicious code in @ikea-aoa/component-store-selector (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ikea-aoa/component-store-selector (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-26029 Adobe Experience Manager | Improper Access Control (CWE-284)

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose information. Exploitation of this issue does no...

WordPress plugin Visual Footer Credit Remover 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-22444 · WordPress · Visual Footer Credit Remover

Name of the Vulnerable Software and Affected Versions: Visual Footer Credit Remover plugin for WordPress versions up to, and including, 2 Description: The issue allows authenticated attackers with administrator-level access to inject arbitrary web scripts in pages via the selector parameter due t...

kernel: perf trace: Really free the evsel->priv area

A memory leak flaw was found in the Linux kernel's perf trace tool in the event selector cleanup logic. A local user can trigger this issue by running perf trace commands, causing the tool to free memory based on an incorrect condition check that inverts the intended logic for non-syscall...

kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018

A flaw was discovered in the ath11k wireless driver in the Linux kernel where the hardware operations structure for the IPQ5018 platform did not include a hwops-getringselector callback. When network traffic is being sent after clients have connected, this missing function pointer may be...

CVE-2024-3931

A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...

PT-2024-26459 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/delete log.php file. The manipulation of the selector argument leads to SQL injection. This issue can be exploited...

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of Church Management System, which originates from a SQL injection vulnerability in the selector parameter of the /admin/deletelog.php file...

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates in the selector parameter of the admin/deactivateteach.php file and can be exploited for SQL injection attacks...

PT-2024-25768 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the admin/activateall.php file, where the manipulation of the selector argument leads to SQL injection. This issue can be exploited remotely...

PT-2024-25743 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the software, affecting the file admin/deactivatestud.php. The manipulation of the selector argument leads to SQL injection. This issue can be...

PT-2024-25757 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue affects the processing of the file admin/activateteach.php, where the manipulation of the selector argument leads to SQL injection. The attack can be initiated remotel...

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates in the selector parameter of the admin/deactivatestud.php file and can be exploited for SQL injection attacks...

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from the selector parameter in the admin/activateall.php file and can be exploited for SQL injection attacks...