CVE-2019-10789

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization...

CVE-2017-8899

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The...

WordPress plugin WP JobHunt 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

WhatsApp has introduced an extra layer of privacy called Advanced Chat Privacy that allows users to block participants from sharing the contents of a conversation in traditional chats and groups. "This new setting available in both chats and groups helps prevent others from taking content outside...

WordPress plugin Avatar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

CVE-2025-25276

An unauthenticated attacker can hijack other users' devices and potentially control them...

PT-2025-14872 · Elaborate Bytes Ag · Virtual Clonedrive

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a kernel driver that is accessible to low-privileged users. This driver exposes a function that fails to properly validate the privileges of the calling process, allowing...

CVE-2024-56325

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d...

WordPress plugin JobBoard Job listing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Proliz OBS 安全漏洞

Proliz OBS is an application from Proliz, Inc. A security vulnerability exists in Proliz OBS versions prior to 24.0927, which stems from a user control key leading to authorization bypass...

CVE-2024-53151

CVE-2024-53151: In the Linux kernel, the svcrdma path (xprtrdma) has an integer overflow in xdr_check_write_chunk() where an untrusted 32-bit segcount can be multiplied by rpcrdma_segment_maxsz and sizeof(*p), risking a buffer overflow. The description cites a commit that adds a parsed chunk list...

NextGeography NG Analyser 安全漏洞

NextGeography NG Analyser is a location-based data visualization and analysis application from NextGeography. A security vulnerability exists in NextGeography NG Analyser that stems from an authorization authentication that can be bypassed via a user control key, potentially leading to misuse of...

A day in the life of a privacy pro, with Ron de Jesus (Lock and Code S05E26)

This week on the Lock and Code podcast… Privacy is many things for many people. For the teenager suffering from a bad breakup, privacy is the ability to stop sharing her location and to block her ex on social media. For the political dissident advocating against an oppressive government, privacy ...

GLPI 访问控制错误漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Media Streaming add-on 安全漏洞

Media Streaming add-on is a media streaming add-on. A security vulnerability exists in Media Streaming add-on prior to version 500.1.1.6, which stems from the inclusion of an authorization bypass vulnerability via a user control key...

CVE-2024-10174

CVE-2024-10174 – WP Project Manager (WordPress) vulnerability : The plugin versions

Fortinet FortiPortal 安全漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability exists in Fortinet FortiPortal version 7.0.3 and prior versions...

WordPress plugin Paid Memberships Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-9215

The CVE-2024-9215 entry concerns the WordPress plugin PublishPress Authors (Co-Authors, Multiple Authors and Guest Authors) up to version 4.7.1. It describes an insecure direct object reference in the action_edited_author() flow, caused by missing validation of the authors-user_id key, which is u...

PT-2024-33281 · Unknown · Lemonldap::Ng

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.19.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML into the login page via a username if userControl has been set to a non-default value that...