Aggregator

A vulnerability was found in PHPCompta PHPCompta and NOALYSS up to 6.7.0 and classified as critical. Affected by this issue is some unknown functionality of the file backup.php. The manipulation leads to code injection. This vulnerability is handled as CVE-2014-6389. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

The supply chain attack involving the GitHub Action "tj-actions/changed-files" started as a highly-targeted attack against one of Coinbase's open-source projects, before evolving into something more widespread in scope. "The payload was focused on exploiting the public CI/CD flow of one of their open source projects – agentkit, probably with the purpose of leveraging it for further compromises,"

A vulnerability was found in Xceedium Xsuite 2.3.0. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to hard-coded credentials. The identification of this vulnerability is CVE-2015-4667. The attack may be initiated remotely. Furthermore, there is an exploit available.

Google выявил уязвимость, которую срочно пришлось исправлять.

随着全球人口老龄化加剧，越来越多的老年人住进养老院。对于他们来说，适应养老院的生活并非易事，不仅要面对身体机能的衰退，还要应对心理上的挑战，如孤独感、社交隔离、抑郁和躯体化等问题。这些心理问题不仅影响老年人的生活质量，还可能对他们的身体健康造成长期负面影响。土耳其研究人员开展了一项关于休闲游戏对老年人幸福感、生活满意度、孤独感和躯体化影响的研究，选取了 80 名来自两所养老院的 65 岁及以上老人，分为干预组和对照组。干预组的老人从 15 种游戏中选择 4 种（宾果游戏、单词挑战游戏、冷热游戏和配对游戏），每周玩两次，持续两个月；对照组照旧。研究人员在干预前、干预后 1 周和 1 个月分别测量了他们的心理状态。结果显示，干预组老年人的幸福感和生活满意度在干预后显著提升。研究表明休闲游戏对老年人的幸福感、生活满意度、孤独感和躯体化有积极影响。

A vulnerability was found in BigTree CMS 4.2.23. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/ajax/file-browser/upload/ of the component Image Upload. The manipulation leads to cross site scripting (Stored). This vulnerability is handled as CVE-2018-18308. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in Toshiba Tec e-Studio Multi-Function Peripheral. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-27162. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in AZAN Plugin up to 0.6 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-3993. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Similarity Plugin up to 3.0 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2024-3972. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Inquiry Cart Plugin up to 3.4.2 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-5155. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in Trol InterMedia 2ClickPortal up to 7.6.4. This vulnerability affects unknown code of the component URL Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-5961. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Mattermost Desktop App up to 5.7.0. Affected is an unknown function of the component External URL Handler. The manipulation leads to protection mechanism failure. This vulnerability is traded as CVE-2024-37182. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in CubeCart. It has been classified as critical. Affected is an unknown function of the file includes/content/viewProd.inc.php. The manipulation of the argument productId leads to sql injection. This vulnerability is traded as CVE-2009-4060. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

精神污染、猎奇恐怖、算法赌博的黑暗循环

A vulnerability classified as problematic was found in Broadcom Symantec SiteMinder R12.8/R 12.52 SP1 CR11. Affected by this vulnerability is an unknown functionality of the component Web Agent. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-36459. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Jeg Elementor Kit Plugin up to 2.6.5 on WordPress. Affected by this issue is some unknown functionality of the component Accordion Widgets. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-4479. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in ElementsKit Elementor Addons and Templates Library Plugin up to 3.6.2 on WordPress. This affects an unknown part of the component Motion Text/Table Widgets. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-5263. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Elastic Kibana up to 7.17.21/8.13.4. It has been rated as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2024-23442. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in LB-LINK BL-W1210M 2.0. This affects an unknown part of the component Elements Handler. The manipulation leads to clickjacking. This vulnerability is uniquely identified as CVE-2024-33377. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Nextcloud Calendar App up to 4.6.7/4.7.1. It has been rated as problematic. This issue affects some unknown processing of the component Event Attachment Handler. The manipulation leads to improper handling of unexpected data type. The identification of this vulnerability is CVE-2024-37316. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.