CVE-2024-12657 IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E000 null pointer dereference

A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E000 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has...

CVE-2024-54370

Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Upload a Web Shell to a Web Server.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through = 1.1.0...

PT-2024-17699 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A problematic issue has been found, affecting the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null...

PT-2024-36257 · Unknown · Suiteplugins Video & Photo Gallery

Name of the Vulnerable Software and Affected Versions: SuitePlugins Video & Photo Gallery for Ultimate Member versions n/a through 1.1.0 Description: The issue allows uploading a Web Shell to a web server due to unrestricted file upload with dangerous types. This enables potential attackers to...

IObit Advanced SystemCare Utimate 安全漏洞

IObit Advanced SystemCare Utimate is a powerful antivirus and system optimization tool from IObit. A security vulnerability exists in IObit Advanced SystemCare Utimate version 17.0.0 and earlier, which stems from a function 0x8001E000 in the AscRegistryFilter.sys library of the component IOCTL...

PT-2024-17701 · Iobit · Iobit Advanced Systemcare Ultimate +1

Name of the Vulnerable Software and Affected Versions: IObit Advanced SystemCare Ultimate versions up to 17.0.0 Description: A vulnerability was found in the function 0x8001E018 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

IObit Advanced SystemCare Utimate 安全漏洞

IObit Advanced SystemCare Utimate is a powerful antivirus and system optimization tool from IObit. A security vulnerability exists in IObit Advanced SystemCare Utimate version 17.0.0 and earlier, which stems from a function 0x8001E01C in the AscRegistryFilter.sys library of the component IOCTL...

WordPress plugin Video & Photo Gallery for Ultimate Member 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue exists in the WordPress plugin...

IObit Advanced SystemCare Utimate 安全漏洞

IObit Advanced SystemCare Utimate is a powerful antivirus and system optimization tool from IObit. A security vulnerability exists in IObit Advanced SystemCare Utimate version 17.0.0 and earlier, which stems from a function 0x8001E024 in the AscRegistryFilter.sys library of the component IOCTL...

IObit Advanced SystemCare Utimate 安全漏洞

IObit Advanced SystemCare Utimate is a powerful antivirus and system optimization tool from IObit. A security vulnerability exists in IObit Advanced SystemCare Utimate version 17.0.0 and earlier, which stems from a function 0x8001E018 in the AscRegistryFilter.sys library of the component IOCTL...

WordPress Ultimate Blocks plugin < 3.2.4 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ultimate Blocks versions 3.2.4...

CVE-2024-54264

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmorillas1 Shortcodes Blocks Creator Ultimate ultimate-shortcodes-creator allows Reflected XSS.This issue affects Shortcodes Blocks Creator Ultimate: from n/a through = 2.2.0...

CVE-2023-34009

Missing Authorization vulnerability in Inisev Social Media & Share Icons ultimate-social-media-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media & Share Icons: from n/a through = 2.8.1...

CVE-2024-54264 WordPress Shortcodes Blocks Creator Ultimate plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in César Morillas Shortcodes Blocks Creator Ultimate allows Reflected XSS.This issue affects Shortcodes Blocks Creator Ultimate: from n/a through 2.2.0...

CVE-2024-54264

CVE-2024-54264 affects the WordPress Shortcodes Blocks Creator Ultimate plugin (versions through 2.2.0). The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Exploitation is possible via standard web requests and may...

CVE-2024-10678

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678 Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-10678 Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS

The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin Ultimate Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16454 · WordPress · Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: Ultimate Blocks WordPress plugin versions prior to 3.2.4 Description: The issue is related to the Ultimate Blocks WordPress plugin not validating and escaping some of its block options before outputting them back in a page or post where the...