Tag
#ruby
Innue Business Live Chat version 2.5 suffers from an ignored default credential vulnerability.
Multi Store Inventory Management System version 1.0 suffers from an insecure direct object reference vulnerability.
SIM Wisuda version 1.0 suffers from an insecure direct object reference vulnerability.
Webdenim AppUI version 1.0 suffers from an insecure direct object reference vulnerability.
Ubuntu Security Notice 6905-1 - It was discovered that Rack incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.
LMS ZAI version 6.1 suffers from an ignored default credential vulnerability.
Quick Job version 2.4 suffers from an insecure direct object reference vulnerability.
eDesign CMS version 2.0 suffers from an insecure direct object reference vulnerability.
Adobe Commerce and Magento Open Source are affected by an XML injection vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction. Versions Affected include Adobe Commerce and Magento Open Source 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8, and earlier. This exploit uses the arbitrary file reading aspect of the issue to impersonate a user.