CVE-2024-9478

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9479

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9479

CVE-2024-9479 affects upKeeper Instant Privilege Access prior to 1.2. The root cause is improper privilege management, enabling privilege escalation with HIGH impact to confidentiality, integrity, and availability (per CVSS 4.0). Exploitation details are not provided in the sources. Remediation: ...

CVE-2024-9479

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9479

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9478

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9478

CVE-2024-9478 concerns an Improper Privilege Management vulnerability in upKeeper Solutions’ upKeeper Instant Privilege Access, affecting versions prior to 1.2. The vulnerability enables Privilege Escalation due to improper privilege handling in the product’s privilege management component. Affec...

CVE-2024-9478

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-51163

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive information through the print label function. Specifically, the filePathList parameter is susceptible to LFI, enabling a malicious user to include files from...

CVE-2024-51163

A Local File Inclusion vulnerability in Vegam Solutions Vegam 4i versions 6.3.47.0 and earlier allows a remote attacker to obtain sensitive information through the print label function. Specifically, the filePathList parameter is susceptible to LFI, enabling a malicious user to include files from...

CVE-2024-51163

Vegam 4i (Vegam 4i, versions 6.3.47.0 and earlier) contains a Local File Inclusion via the filePathList parameter in the print label function. An attacker could include server files (e.g., web.config or /etc/hosts) to disclose sensitive information. No authentic patch/version is confirmed in the ...

When Guardians Become Predators: How Malware Corrupts the Protectors

When Guardians Become Predators: How Malware Corrupts the Protectors By Trellix · November 20, 2024 This blog was also written by Trishaan Kalra Introduction We often trust our security software to stand as an unbreakable wall against malware and attacks, but what happens when that very wall is...

CVE-2024-51909

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Monarkie DCS audioCase audiocase allows DOM-Based XSS.This issue affects audioCase: from n/a through = 1.2.1...

CVE-2024-51909 WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Monarkie Digital Content Solutions audioCase allows DOM-Based XSS.This issue affects audioCase: from n/a through 1.2.1...

CVE-2024-51909

CVE-2024-51909 is a DOM-based XSS vulnerability in the WordPress plugin audioCase by Monarkie Digital Content Solutions, affecting audioCase versions up to 1.2.1. The connected CVE data indicate this is a Cross-Site Scripting issue generated during web page rendering, with no public exploit detai...

CVE-2024-52342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS BXSlider os-bxslider allows Stored XSS.This issue affects OS BXSlider: from n/a through = 2.6...

CVE-2024-52341

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS Our Team os-our-team allows Stored XSS.This issue affects OS Our Team: from n/a through = 1.7...

CVE-2024-52341 WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd. | Jinesh.P.V OS Our Team allows Stored XSS.This issue affects OS Our Team: from n/a through 1.7...

CVE-2024-52341

CVE-2024-52341 is a stored Cross-Site Scripting vulnerability affecting the WordPress plugin “OS Our Team” (OS Our Team) version

CVE-2024-52341 WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS Our Team os-our-team allows Stored XSS.This issue affects OS Our Team: from n/a through = 1.7...