CVE-2023-6140

The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution...

CVE-2023-6140 Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload

The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution...

Recipe Maker For Your Food Blog from Zip Recipes < 8.1.1 - Authenticated(Contributor+) SQL Injection

Description The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection via the ‘order’ and 'orderby' parameters in all versions up to 8.1.1 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-20805

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file...

SAMSUNG mobile devices path traversal vulnerability

SAMSUNG mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A path traversal vulnerability exists in SAMSUNG mobile devices SMR Jan-2024 Release 1 version and earlier versions, which stems from a path traversal...

PT-2024-18711 · Google +1 · Android 11 +3

Name of the Vulnerable Software and Affected Versions: MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12 MyFiles version 14.5.00.21 in Android 13 Description: A path traversal vulnerability in the ZipCompressor of MyFiles allows local attackers to write arbitrary files...

CVE-2023-52180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

CVE-2023-52180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

CVE-2023-52180

CVE-2023-52180 affects Recipe Maker For Your Food Blog from Zip Recipes (Zip Recipes) up to version 8.1.0. The Wordfence vulnerability list notes an Authenticated (Contributor+) SQL Injection in this plugin, with a patch status of Patched. Impact is SQL Injection that can be triggered by an authe...

CVE-2023-52180 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

WordPress Plugin Recipe Maker For Your Food Blog from Zip Recipes SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Recipe Maker For Your Food...

OPENSUSE-SU-2023:0424-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

OPENSUSE-SU-2023:0423-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0424-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: Thi...

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0423-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: Thi...

WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE

Description The plugin accepts all zip files and automatically extracts the zip file into a publicly accessible directory without sufficiently validating the extracted file type. This may allows high privilege users such as administrator to upload an executable file type leading to remote code...

WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection

Software Recipe Maker For Your Food Blog from Zip Recipes Type Plugin Vulnerable versions = 8.1.0 Fixed in 8.1.1 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-52180 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 015c5c5b9e32 Credits Muhammad Daffa...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely the Saia PG5 Controls Suite, arises from incorrect restrictions on the path name to the restricted access directory. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to an incorrect limitation on the path name to the restricted access directory during the processing of ZIP format files. Exploiting this vulnerability can allow a perpetrato...

CVE-2023-6114

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the backups-dup-lite/tmp directory or the backups-dup-pro/tmp directory in the Pro version, which temporarily stores files containing sensitive data. When directory listing is...