WordPress Hello World Plugin <= 2.1.1 is vulnerable to Arbitrary File Download

Software Hello World Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-9224 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 936cc3342bfb Credits yudha Required privilege...

PT-2024-39503 · WordPress · Hello World

Name of the Vulnerable Software and Affected Versions: Hello World plugin for WordPress versions up to, and including, 2.1.1 Description: The issue allows authenticated attackers with subscriber-level access and above to read the contents of arbitrary files on the server, which can contain...

PT-2025-47172

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description A flaw exists in libvirt where external inactive snapshots for shut-down virtual machines are incorrectly created with world-readable permissions. This allows unprivileged users to inspect th...

MAL-2024-9047 Malicious code in world-id-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in world-id-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9018 Malicious code in world-id-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...

Fake League of Legends Download Ads Spread Lumma Stealer Malware

League of Legends fans beware! A new malware campaign targeting the League of Legends World Championship is spreading…...

EPSS vs. CVSS: What's the Best Approach to Vulnerability Prioritization?

Many businesses rely on the Common Vulnerability Scoring System CVSS to assess the severity of vulnerabilities for prioritization. While these scores provide some insight into the potential impact of a vulnerability, they don't factor in real-world threat data, such as the likelihood of...

SUSE CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

Modernizing Enterprise Security for An Application-Centric World

...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

DEBIAN-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

UBUNTU-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

EulerOS 2.0 SP9 : cups (EulerOS-SA-2024-2359)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2024-2409)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

EulerOS 2.0 SP9 : cups (EulerOS-SA-2024-2384)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2024-2409)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...