PT-2025-47172

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description A flaw exists in libvirt where external inactive snapshots for shut-down virtual machines are incorrectly created with world-readable permissions. This allows unprivileged users to inspect th...

WordPress plugin Hello World 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress Hello World Plugin <= 2.1.1 is vulnerable to Arbitrary File Download

Software Hello World Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-9224 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 936cc3342bfb Credits yudha Required privilege...

CVE-2024-9224: Improper Limitation of a Pathname to a Restricted Directory

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

MAL-2024-9047 Malicious code in world-id-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9018 Malicious code in world-id-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in world-id-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...

Fake League of Legends Download Ads Spread Lumma Stealer Malware

League of Legends fans beware! A new malware campaign targeting the League of Legends World Championship is spreading…...

EPSS vs. CVSS: What's the Best Approach to Vulnerability Prioritization?

Many businesses rely on the Common Vulnerability Scoring System CVSS to assess the severity of vulnerabilities for prioritization. While these scores provide some insight into the potential impact of a vulnerability, they don't factor in real-world threat data, such as the likelihood of...

SUSE CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

Modernizing Enterprise Security for An Application-Centric World

...

DEBIAN-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

UBUNTU-CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958: Undefined Security Weakness

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

PT-2024-32299

Name of the Vulnerable Software and Affected Versions Nextcloud Desktop Client versions 3.13.1 through 3.13.3 Description In the Nextcloud Desktop Client on Linux, synchronized files between the server and client may become world writable or world readable. This issue is fixed in version 3.13.4...