PT-2024-25386 · Unknown · Cusmin Absolutely Glamorous Custom Admin

Name of the Vulnerable Software and Affected Versions: Cusmin Absolutely Glamorous Custom Admin versions through 7.2.2 Description: A Server-Side Request Forgery SSRF issue affects the software, allowing unauthorized access to internal resources. This can lead to sensitive data exposure or other...

CVE-2024-32801

Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.

less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable but this is set by default in many common cases.

...

CVE-2022-46897: Unchecked Return Value

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...

CVE-2023-22869: Insertion of Sensitive Information into Log File

IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 244119...

PT-2024-24645 · Unknown · Flector Easy Textillate

Name of the Vulnerable Software and Affected Versions: Flector Easy Textillate versions n/a through 2.02 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2024-6879 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.5 Description: The issue is related to a path traversal vulnerability that allows a remote unauthenticated attacker to bypass authentication. This is due to incorrect restriction of the path name to a...

PT-2024-13209 · Litespeed Technologies · Litespeed Cache

Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache versions n/a through 5.7 Description: The issue is related to a Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache. This vulnerability allows for remote attacks due to the lack of proper authorizatio...

PT-2024-24387 · Unknown · Kp4Coder Sync Post With Other Site

Name of the Vulnerable Software and Affected Versions: kp4coder Sync Post With Other Site versions n/a through 1.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in kp4coder Sync Post With Other Site. Recommendations: For versions...

PT-2024-24020 · Unknown · Apppresser

Name of the Vulnerable Software and Affected Versions: AppPresser versions through 4.3.0 Description: A Cross-Site Request Forgery CSRF issue affects AppPresser, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For versions through 4.3.0,...

PT-2024-24032 · Unknown · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation versions through 24.0128 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

PT-2024-24410

Name of the Vulnerable Software and Affected Versions NextMove Lite versions through 2.18.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability in XLPlugins NextMove Lite. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2024-23475 · Unknown · Nick Powers Social Author Bio

Name of the Vulnerable Software and Affected Versions: Nick Powers Social Author Bio versions n/a through 2.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Nick Powers Social Author Bio. Recommendations: For versions n/a through 2.4, update to...

CVE-2024-31927: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aminur Islam WP Login and Logout Redirect allows Stored XSS.This issue affects WP Login and Logout Redirect: from n/a through 1.2...

CVE-2024-31375: Missing Authorization

Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through = 3.2.7...

CVE-2024-31308

Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue affects WP Import Export Lite: from n/a through 3.9.26...

CVE-2024-31105: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5...

CVE-2024-31089: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techblissonline.Com Rajesh Platinum SEO allows Stored XSS.This issue affects Platinum SEO: from n/a through 2.4.0...

CVE-2024-30482

Cross-Site Request Forgery CSRF vulnerability in Brice CAPOBIANCO Simple Revisions Delete.This issue affects Simple Revisions Delete: from n/a through 1.5.3...

CVE-2023-6191

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egehan Security WebPDKS allows SQL Injection. This issue affects WebPDKS: through 20240329. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...