Schwachstellen, die jetzt zählen.

A security flaw has been discovered in JeecgBoot up to 3.9.5.

A security flaw has been discovered in JeecgBoot up to 3.9.5. This vulnerability affects the function OpenApiController.call of the file /openapi/call of the component Authentication Filter. The manipulation results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was identified in JeecgBoot up to 3.9.6.

A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation.

Gutenverse Form plugin for WordPress before 3.2.2 contains a CSV formula injection vulnerability that allows unauthenticated attackers to inject spreadsheet…

Gutenverse Form plugin for WordPress before 3.2.2 contains a CSV formula injection vulnerability that allows unauthenticated attackers to inject spreadsheet formula-trigger characters by submitting free-text field values to the public form-submit REST route, which sanitizes input with sanitize_text_field() without stripping characters such as =, +, @, or a leading minus. Attackers can store malicious formulas in entry-data post meta that are later exported unneutralized via…

PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated attackers to cause denial of service by…

PapaParse before 5.7.1 contains an inefficient algorithmic complexity vulnerability that allows remote unauthenticated attackers to cause denial of service by submitting delimiter-free quoted CSV input to Papa.parse(). Attackers can supply a single-column quoted CSV with no delimiters, triggering repeated full-buffer indexOf scans per row that grow quadratically with input size, exhausting CPU and blocking the Node.js event loop or freezing a browser tab.

Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd.

Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce…

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd.

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Password Recovery Exploitation. This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration…

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1.

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the set_email_notification_settings() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to grant themselves administrator privileges by updating their own 'wp_capabilities' user meta value.

The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1.

The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without any authorization verification. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their privileges to…

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151.

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to Administrator by setting the `stm_developer_access_token` transient and using the…

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen

Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen