CVE-2024-56250

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

CVE-2024-56250 WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

CVE-2024-56250 WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

CVE-2024-56250

CVE-2024-56250 concerns the WordPress plugin Just Writing Statistics (vulnerable up to 4.7). The issue is described as an SQL Injection caused by improper neutralization of input in SQL commands, enabling attacker-controlled input to affect database queries. Public references (Red Hat and Wordfen...

WordPress plugin Just Writing Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by l8BL Patchstack Alliance in WordPress Plugin Just Writing Statistics versions = 4.7...

CVE-2024-47151

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2024-47151

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2024-47151

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

CVE-2024-47151

Honor MagicOS is affected by CVE-2024-47151 due to a file write vulnerability that could lead to code execution on successful exploitation. CNNVD describes the issue in MagicOS and notes a specific affected version: 8.0.0.135. The connected documents provide limited technical detail beyond the ex...

CVE-2024-47151

Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...

PT-2024-32439 · Honor · Honor Products

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a file writing vulnerability in certain Honor products. Successful exploitation of this vulnerability could lead to code execution. Recommendations: At the moment,...

PlexTrac 安全漏洞

PlexTrac is a penetration test reporting and management platform from PlexTrac Inc. in the United States. A security vulnerability exists in PlexTrac versions prior to 1.61.3 through 2.8.1 that stems from an untrustworthy data deserialization vulnerability in the Runbook module, which allows obje...

USN-7153-1: PHP vulnerability

It was discovered that PHP incorrectly handled long string inputs in two database drivers. An attacker could possibly use this issue to write files in locations they would not normally have access to. CVE-2024-11236...

CVE-2024-21575

ComfyUI-Impact-Pack is vulnerable to Path Traversal. The issue stems from missing validation of the image.filename field in a POST request sent to the /upload/temp endpoint added by the extension to the server. This results in writing arbitrary files to the file system which may, under some...

[SECURITY] [DLA 3968-1] netatalk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3968-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 28, 2024 https://wiki.debian.org/LTS -...

Path Traversal

net.sf.mpxj, mpxj is vulnerable to Path Traversal. The vulnerability is due to an incomplete patch for CVE-2020-35460, which still allows the construction of malicious paths to write files to arbitrary locations...

PT-2024-38682 · Unknown · Sensei Mac Cleaner

Name of the Vulnerable Software and Affected Versions: Sensei Mac Cleaner affected versions not specified Description: The issue allows an attacker to perform multiple operations as the root user, including arbitrary file deletion and writing, loading and unloading daemons, manipulating file...

CVE-2024-11477

CVE-2024-11477 affects 7-Zip via the Zstandard decompression path. The root cause is improper validation of input data in Zstandard decompression, allowing an integer underflow that can lead to arbitrary code execution in the process. Public writeups (ZDI-24346) describe the underlying flaw; mult...

PT-2024-10704 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a permissions bypass in DownloadManager.java, allowing for the possible read and write of arbitrary files. This could lead to local...