โผ CVE-2021-21797 โผ
๐ Read
via "National Vulnerability Database".
An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-22942 โผ
๐ Read
via "National Vulnerability Database".
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-38430 โผ
๐ Read
via "National Vulnerability Database".
FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-21796 โผ
๐ Read
via "National Vulnerability Database".
An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containing the path to a document to be destroyed and then later reused, resulting in a use-after-free vulnerability, which can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-38438 โผ
๐ Read
via "National Vulnerability Database".
A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.๐ Read
via "National Vulnerability Database".
๐๏ธ Node.js was vulnerable to a novel HTTP request smuggling technique ๐๏ธ
๐ Read
via "The Daily Swig".
Bad line termination and incorrect parsing of chunk extensions exposed one of two HRS flaws๐ Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Node.js was vulnerable to a novel HTTP request smuggling technique
Bad line termination and incorrect parsing of chunk extensions exposed one of two HRS flaws
๐ฆฟ Cybersecurity Awareness Month: Why haven't you updated your security policies? ๐ฆฟ
๐ Read
via "Tech Republic".
While you're sipping that pumpkin spice latte, make sure to review your company's cybersecurity policies.๐ Read
via "Tech Republic".
TechRepublic
Cybersecurity Awareness Month: Why haven't you updated your security policies?
While you're sipping that pumpkin spice latte, make sure to review your company's cybersecurity policies.
โ Twitter Suspends Accounts Used to Snare Security Researchers โ
๐ Read
via "Threat Post".
The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea.๐ Read
via "Threat Post".
Threat Post
Twitter Suspends Accounts Used to Snare Security Researchers
The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea.
โผ CVE-2021-24752 โผ
๐ Read
via "National Vulnerability Database".
Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24415 โผ
๐ Read
via "National Vulnerability Database".
The Polo Video Gallery รยขรขโยฌรขโฌล Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24702 โผ
๐ Read
via "National Vulnerability Database".
The LearnPress WordPress plugin before 4.1.3.1 does not properly sanitize or escape various inputs within course settings, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltred_html capability is disallowed๐ Read
via "National Vulnerability Database".
โผ CVE-2021-41990 โผ
๐ Read
via "National Vulnerability Database".
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-42575 โผ
๐ Read
via "National Vulnerability Database".
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24754 โผ
๐ Read
via "National Vulnerability Database".
The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24612 โผ
๐ Read
via "National Vulnerability Database".
The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfiltered_html capability is disallowed๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24760 โผ
๐ Read
via "National Vulnerability Database".
The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-41991 โผ
๐ Read
via "National Vulnerability Database".
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24734 โผ
๐ Read
via "National Vulnerability Database".
The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-42576 โผ
๐ Read
via "National Vulnerability Database".
The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-3755 โผ
๐ Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.๐ Read
via "National Vulnerability Database".
โผ CVE-2021-24736 โผ
๐ Read
via "National Vulnerability Database".
The Easy Download Manager and File Sharing Plugin with frontend file upload รยขรขโยฌรขโฌล a better Media Library รยขรขโยฌรขโฌ๏ฟฝ Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues.๐ Read
via "National Vulnerability Database".