James Golovich

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

A API REST do Metasploit Framework Web Service (msf-ws) contém uma falha onde o `Msf::WebServices::CredentialServlet` não impõe a autenticação para rotas específicas. Especificamente, os manipuladores `update credential` (PUT) e `delete credentials` (DELETE) para o endpoint '/api/v1/credentials' omitem a chamada de autenticação necessária. Como o `lib/ms/core/db manager/cred.rb` subjacente não realiza suas próprias verificações de autorização, qualquer cliente com acesso de rede ao listener padrão 0.0.0.0:8080 pode ler, modificar ou excluir permanentemente todos os registros de credenciais armazenados, incluindo senhas, hashes e chaves privadas.

The issue allows sensitive data to be exposed in logs, which an attacker could use to find hashed passwords and possibly escalate their privilege.

A vulnerabilidade permite que usuários não autenticados façam upload de arquivos, limitados àqueles permitidos na configuração padrão do WordPress, caso haja um formulário no front-end disponível. Isso foi introduzido na reescrita da versão 5.0 e não existia antes desse lançamento.

The issue allows for privilege escalation.

The issue is related to incorrect access control for admin init settings changes in the wp-invoice plugin.

The issue is related to incorrect access control, specifically over updates to payer metadata for PayPal in the wp-invoice plugin.

The issue is related to incorrect access control over updates to payer metadata for the wpi interkassa module.

The issue is related to incorrect access control over updates to payer metadata for the wpi twocheckout component.

The issue allows for privilege escalation due to the wpi update user option.

The issue is related to incorrect access control in the wp-invoice plugin, specifically over the `wpi user id` variable for invoice retrieval.

The issue is related to incorrect access control for shortcodes due to a nonce leak.

The issue allows for privilege escalation.

The issue allows for privilege escalation.

The issue is related to incorrect login access control. It allows access with only the knowledge of an e-mail address, which is insufficient for secure authentication.

The issue concerns a privilege escalation in the PeepSoProfilePreferencesAjax->save() function.

The issue allows remote attackers to conduct PHP object injection attacks. This is achieved by sending crafted serialized values in a POST request.