4Nis
A week in security (March 28 – April 3)
The most important and interesting security stories from the last seven days.
The post A week in security (March 28 – April 3) appeared first on Malwarebytes Labs.
Category Archives: A little gift for you
Son Yazılar
- CVE-2024-9856 | 07FLYCMS/07FLY-CMS/07FlyCRM 1.3.8 System Settings Page Login Interface Copyright cross site scripting
- CVE-2024-9855 | 07FLYCMS/07FLY-CMS/07FlyCRM 1.3.8 Module Plug-In sysmodule_1 uploadFile file unrestricted upload
- New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution
- CVE-2024-9538 | ShopLentor Plugin up to 2.9.8 on WordPress FAQ Widget Elementor Template information disclosure
- CVE-2024-7514 | Comments Import & Export Plugin up to 2.3.7 on WordPress path traversal
- CVE-2024-9779 | Open Cluster Management cluster-manager permission
- CVE-2024-9487 | GitHub Enterprise Server up to 3.11.15/3.12.9/3.13.4/3.14.1 SAML SSO signature verification
- CVE-2024-48987 | Snipe-IT up to 7.0.9 APP_KEY Privilege Escalation
- CVE-2024-47167 | Gradio up to 4.x Video Component /queue/join async_save_url_to_cache server-side request forgery (GHSA-576c-3j53-r9jj)
- CVE-2024-47872 | Gradio up to 4.x cross site scripting (GHSA-gvv6-33j7-884g)