CVE-2024-53264

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated...

CVE-2024-11024

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possibl...

The vulnerability of the Apache Tomcat application server, related to unvalidated error states, allows attackers to bypass authentication processes and cause service failures.

The vulnerability of the Apache Tomcat application server is related to an unvalidated error condition. Exploiting this vulnerability allows a malicious actor to bypass authentication processes and cause service failures...

WordPress plugin InPost Gallery 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

CVE-2024-52811

CVE-2024-52811 affects ngtcp2 (QUIC in C). A patch added in conn_recv_pkt skips ngtcp2_pkt_validate_ack for certain acks, allowing an invalid ack to reach qlog, where ngtcp2_qlog::write_ack_frame can underflow when largest_ack=0 and first_ack_range=15, overwriting a heap buffer and causing heap o...

ngtcp2 安全漏洞

ngtcp2 is an open source library for ngtcp2. A security vulnerability exists in ngtcp2 that stems from a buffer overflow caused by ack not being validated before writing to the qlog...

PT-2024-35460 · Ngtcp2 · Ngtcp2

Name of the Vulnerable Software and Affected Versions: ngtcp2 versions prior to 1.9.1 Description: The issue arises from the lack of validation of acks before they are written to the qlog, leading to a buffer overflow. This occurs in the ngtcp2 conn::conn recv pkt function when handling an ACK,...

CVE-2024-7565

SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerability in that the target must visit a...

PT-2024-10927 · Qualcomm · Snapdragon +73

Name of the Vulnerable Software and Affected Versions: Audio module affected versions not specified Description: The issue is related to a possible out of bound access in the audio module due to the lack of validation of user-provided input. Recommendations: At the moment, there is no information...

SoapUI 路径遍历漏洞

SoapUI is an open source API testing tool from SmartBear. A path traversal vulnerability exists in SoapUI that stems from a lack of proper validation before using a user-supplied path in a file operation, and a directory traversal remote code execution vulnerability that could allow a remote...

Wyze Cam 操作系统命令注入漏洞

Wyze Cam Wyze Labs is a series of cameras from Wyze USA. Wyze Cam v3 suffers from an operating system command injection vulnerability that stems from a lack of proper validation before executing a system call using a user-supplied string. An attacker exploiting this vulnerability could execute...

PT-2024-17110 · Luxion · Luxion Keyshot

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this issue, where the target must...

PT-2024-17038 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

PT-2024-32621 · Myscada · Myscada Mypro Manager

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO Manager affected versions not specified Description: A parameter within a command does not properly validate input, which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands. Th...

IBM Concert 安全漏洞

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. IBM Concert suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. A...

cups: libppd: remote command injection via attacker controlled data in PPD file

A security vulnerability was found in OpenPrinting CUPS. The function ppdCreatePPDFromIPP2 in the libppd library is responsible for generating a PostScript Printer Description PPD file based on attributes retrieved from an Internet Printing Protocol IPP response. Essentially, it takes printer...

kernel: wifi: cfg80211: validate HE operation element parsing

A vulnerability was found in the Linux kernel's cfg80211 component, related to the parsing of HE operation elements, where the issue occurs when the length of the HE operation element is not validated before parsing, potentially leading to buffer overflows or undefined behavior...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

CVE-2024-10261

The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.13.0. This is due to the software allowing users to execute an action that does not...

CVE-2024-30140

HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page...