Secatgourity

The issue allows unauthenticated attackers to extract the HubSpot integration developer API key, making unauthorized changes to the plugin's HubSpot integration possible. This can also lead to the exposure of personally identifiable information from plugin users using the HubSpot integration. The vulnerability is related to the `class-forminator-addon-hubspot-wp-api.php` file.

The issue allows for SPX UI URI Directory Traversal, enabling the reading of arbitrary files.

A Cross-Site Scripting issue exists within the ticket creation and modification functionality, allowing attackers to inject malicious JavaScript code into the title field of tickets. This stored XSS issue can be exploited to perform Server-Side Request Forgery (SSRF) attacks.

An issue in the theme management feature allows an attacker to execute arbitrary code via a crafted file.

An issue in the software allows a remote attacker to execute arbitrary code via the `mutIn` and `mutInManyUnsafe` components. This enables the attacker to perform unauthorized actions on the affected system.

A remote code execution issue has been identified in the User Defined Tags module of CMS Made Simple. This issue arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.

An issue in the software allows an attacker to execute arbitrary code via the "/files/backup/" component.

The issue is caused by an unsafe deserialization, allowing a remote authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. This could enable the attacker to execute arbitrary code in the context of SYSTEM.

A template injection vulnerability in older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve remote code execution (RCE) on an affected instance. The vulnerability is being actively exploited by threat actors, with over 39,000 attempts to exploit it recorded in just three days. The exploitation of this vulnerability can lead to unauthorized code execution, allowing attackers to install malware, steal sensitive data, or disrupt operations.

A critical issue was found in the Fighting Cock Information System, affecting an unknown function of the file admin/pages/tables/add con.php. The manipulation of the `id` argument leads to SQL injection. It is possible to launch the attack remotely.

A critical issue has been found in the processing of the file admin/action/update mother.php, where the manipulation of the `age mother` argument leads to sql injection. The attack can be initiated remotely.

The issue concerns a server-side request forgery and cross-site scripting vulnerability in NextChat, also known as ChatGPT-Next-Web. This vulnerability enables read access to internal HTTP endpoints and write access using HTTP POST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious traffic intended for other Internet targets through these open proxies. Approximately 29,217 devices are potentially affected, mainly distributed in the United States and China. There are no reported patches available at this time.

يسمح خلل في بروتوكول HTTP/2 بحدوث حالة رفض الخدمة (DoS) من خلال استهلاك موارد الخادم. ينبع هذا الخلل من قدرة البروتوكول على تعدد إرسال الطلبات عبر اتصال TCP واحد، حيث يمكن للعميل إرسال إطار `RST STREAM` لإلغاء الطلب. في هجوم Rapid Reset، يقوم المهاجم بإرسال سلسلة سريعة من الطلبات تليها عمليات إلغاء فورية. يتيح ذلك للمهاجم تجاوز الحد الأقصى لتدفقات البيانات المتزامنة التي يحددها الخادم وإثقال كاهل النظام، حيث يظل الخادم يعالج كل طلب ويقوم بإنشاء سجلات قبل حدوث عملية إعادة الضبط. تم استغلال هذه التقنية في هجمات فعلية بين أغسطس وأكتوبر 2023، مما أدى إلى هجمات DDoS قياسية على الطبقة السابعة. على سبيل المثال، رصدت Google Cloud ذروة بلغت 398 مليون طلب في الثانية، وAWS أكثر من 155 مليوناً، وCloudflare 201 مليون طلب في الثانية. يمكن تنفيذ هذه الهجمات باستخدام شبكات بوتنت صغيرة نسبياً تتكون من حوالي 20,000 جهاز.