Aggregator

A vulnerability, which was classified as critical, was found in Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor Plugin up to 3.7.3.2 on WordPress. This affects an unknown part of the component Media Upload Handler. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-7447. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in NixOS Hydra. Affected by this issue is some unknown functionality of the file /api/push of the component Continuous Integration Service. The manipulation leads to missing authentication. This vulnerability is handled as CVE-2024-45049. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Meshtastic firmware up to 2.4.0. Affected by this vulnerability is an unknown functionality of the component MQTT Handler. The manipulation leads to handling of exceptional conditions. This vulnerability is known as CVE-2024-45038. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in bdthemes Ultimate Store Kit Elementor Addons Plugin up to 2.0.3 on WordPress. Affected is an unknown function of the component Cookie Handler. The manipulation of the argument _ultimate_store_kit_wishlist leads to deserialization. This vulnerability is traded as CVE-2024-8030. It is possible to launch the attack remotely. There is no exploit available.

Software Security / VulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA)

xfptには、スタックベースのバッファオーバーフローの脆弱性が存在します。

Алон Левиев создал средство для возврата старых уязвимостей в систему.

微软将 Mono 项目捐赠了给 Wine 项目。Mono 是 Xamarin 联合创始人 Miguel de Icaza 发起的跨平台 .NET 框架开源实现，微软在 2016 年收购 X

微软将 Mono 项目捐赠了给 Wine 项目。Mono 是 Xamarin 联合创始人 Miguel de Icaza 发起的跨平台 .NET 框架开源实现，微软在 2016 年收购 Xamarin 后拥有了 Mono 项目。但随着 .NET 框架支持 Linux 等非 Windows 平台，Mono 项目对微软没有多少意义了。Mono 上一次大版本更新是在 2019 年 7 月，之后都是补丁版本之类的小更新，上一次补丁版本发布是在 2024 年 2 月。 Wine 项目现在宣布接管 Mono 项目，它表示 mono 代码库可能会存档，但二进制程序会继续提供四年。