4076 matches found
CVE-2023-6567
CVE-2023-6567 affects the WordPress LearnPress plugin (versions ≤ 4.2.5.7). Root cause: insufficient escaping of the user-supplied order_by parameter and inadequate preparation in the underlying SQL, enabling time-based SQL injection. Impact: unauthenticated attackers can append SQL to queries an...
CVE-2023-6634
CVE-2023-6634 affects the LearnPress WordPress plugin. It allows unauthenticated remote code execution via the get_content function by abusing call_user_func with user input in versions up to and including 4.2.5.7. The vulnerability enables execution of arbitrary public functions with a single pa...
CVE-2023-6266
CVE-2023-6266 - WordPress Backup Migration plugin : Concrete details show a path traversal/file validation flaw in the BMI_BACKUP path within the handle_downloading function, affecting all versions up to 1.3.6. Unauthenticated attackers can download backup files containing sensitive data (e.g., p...
CVE-2023-52028
CVE-2023-52028 affects TOTOLINK A3700R devices (v9.1.2u.5822_B20200513). The vulnerability is a remote command execution via the setTracerouteCfg function, stemming from insufficient filtering of constructed command characters, allowing an attacker to execute arbitrary commands remotely. Public d...
CVE-2024-21833
CVE-2024-21833 affects TP-Link routers including Archer AX3000, Archer AX5400, Archer AXE75, Deco X50, and Deco XE200 (JP variants). The issue is an OS command injection vulnerability exploitable by a network-adjacent unauthenticated attacker who can access the device from LAN or Wi‑Fi. Affected ...
CVE-2023-41974
CVE-2023-41974 is a kernel-use-after-free vulnerability in Apple iOS/iPadOS that was leveraged by the Coruna exploit framework. The CVE description notes that exploitation may allow an app to execute arbitrary code with kernel privileges, with fixes shipped in iOS/iPadOS 17 and in iOS 15.8.7 / iP...
CVE-2023-41060
CVE-2023-41060 describes a kernel-type confusion vulnerability that is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The root cause is a type confusions issue in the kernel that can allow a remote attacker to execute code with kernel privileges. Affected platforms, per public records, include ...
CVE-2023-31446
Cassia Gateway firmware versions XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947 expose a vulnerability where the queueUrl parameter in /bypass/config is not sanitized, enabling injection of Bash code that executes with root privileges at device startup. This affects the Cassia Gateway firmwa...
CVE-2024-0352
CVE-2024-0352 affects Likeshop up to 2.5.7.20210311. The vulnerability is in FileServer::userFormImage (file server/application/api/controller/File.php) where manipulating the file argument leads to unrestricted file upload. Impact scope includes remote execution potential with impact to confiden...
CVE-2022-48618
CVE-2022-48618 affects Apple platforms (macOS, iOS/iPadOS, watchOS, tvOS) where an attacker with arbitrary read/write capability can bypass Pointer Authentication due to a TOCTOU/memory-corruption issue. Public details describe a memory-corruption risk that could be exploited locally to bypass se...
CVE-2024-20666
CVE-2024-20666 is a BitLocker security feature bypass related to the Windows Recovery Environment (WinRE). The connected MSRC/updates data confirm a BitLocker bypass vulnerability and note a Microsoft security update to mitigate it (KBs associated with January 2024 security updates, including Win...
CVE-2022-2586
CVE-2022-2586 is a Linux kernel use-after-free in netfilter nf_tables related to nft objects/expressions referencing nft sets across tables. Connected Astra Linux advisories confirm the fix was applied by updating the kernel to address: netfilter nf_tables: do not allow SET_ID to refer to another...
CVE-2024-21650
XWiki Platform is affected by an RCE via the user registration feature. The vulnerability allows arbitrary code execution by crafting payloads in the first name or last name fields during guest user registration. Root cause cited in multiple sources is improper input handling (SSTI-like behavior)...
CVE-2024-0305
CVE-2024-0305 affects Guangzhou Yingke Electronic Technology’s Ncast system (up to 2017) with a vulnerability in the Guest Login component, specifically the file ∕manage∕IPSetup.php. The connected Nuclei template indicates an RCE (remote code execution) path in versions 2017 and earlier, enabling...
CVE-2024-0297
Totolink N200RE (firmware 9.3.5u.6139_B20201216) has a vulnerability in the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi. The FileName parameter manipulation leads to OS command injection. Remote exploitation is possible and public PoCs/exploits have been disclosed. Multiple sources confir...
CVE-2024-0292
CVE-2024-0292 affects Totolink LR1200GB (9.1.0u.6619_B20230130). The vulnerability exists in the setOpModeCfg function of /cgi-bin/cstecgi.cgi, where an attacker can manipulate the hostName parameter to trigger an OS command injection. Impact is remote, with potential full compromise of affected ...
CVE-2023-52271
The CVE-2023-52271 entry concerns Topaz Antifraud wsftprm.sys kernel driver 2.0.0.0. Public materials confirm a vulnerability where low-privilege attackers can terminate any Protected Process Light process via an IOCTL, potentially disabling security products. Public PoCs/exploit code exist (e.g....
CVE-2024-0282
Kashipara Food Management System (version up to 1.0) contains a cross-site scripting vulnerability in addmaterialsubmit.php via the tin parameter. The issue arises from insufficient input handling, enabling an attacker to inject arbitrary scripts into a victim’s browser. The vulnerability is expl...
CVE-2023-50445
CVE-2023-50445 is a shell-injection vulnerability in GL.iNet router firmware affecting multiple models (A1300, AX1800, AXT1800, MT3000, MT2500, MT6000, MT1300, MT300N-V2, AR750S, AR750, AR300M, B1300) across several firmware versions (e.g., v4.4.6, v4.3.7, v4.5.0). The root cause is lack of input...