Secatgourity

The issue allows unauthenticated attackers to extract the HubSpot integration developer API key, making unauthorized changes to the plugin's HubSpot integration possible. This can also lead to the exposure of personally identifiable information from plugin users using the HubSpot integration. The vulnerability is related to the `class-forminator-addon-hubspot-wp-api.php` file.

The issue allows for SPX UI URI Directory Traversal, enabling the reading of arbitrary files.

A Cross-Site Scripting issue exists within the ticket creation and modification functionality, allowing attackers to inject malicious JavaScript code into the title field of tickets. This stored XSS issue can be exploited to perform Server-Side Request Forgery (SSRF) attacks.

An issue in the theme management feature allows an attacker to execute arbitrary code via a crafted file.

An issue in the software allows a remote attacker to execute arbitrary code via the `mutIn` and `mutInManyUnsafe` components. This enables the attacker to perform unauthorized actions on the affected system.

A remote code execution issue has been identified in the User Defined Tags module of CMS Made Simple. This issue arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.

An issue in the software allows an attacker to execute arbitrary code via the "/files/backup/" component.

The issue is caused by an unsafe deserialization, allowing a remote authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. This could enable the attacker to execute arbitrary code in the context of SYSTEM.

A template injection vulnerability in older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve remote code execution (RCE) on an affected instance. The vulnerability is being actively exploited by threat actors, with over 39,000 attempts to exploit it recorded in just three days. The exploitation of this vulnerability can lead to unauthorized code execution, allowing attackers to install malware, steal sensitive data, or disrupt operations.

A critical issue was found in the Fighting Cock Information System, affecting an unknown function of the file admin/pages/tables/add con.php. The manipulation of the `id` argument leads to SQL injection. It is possible to launch the attack remotely.

A critical issue has been found in the processing of the file admin/action/update mother.php, where the manipulation of the `age mother` argument leads to sql injection. The attack can be initiated remotely.

The issue concerns a server-side request forgery and cross-site scripting vulnerability in NextChat, also known as ChatGPT-Next-Web. This vulnerability enables read access to internal HTTP endpoints and write access using HTTP POST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious traffic intended for other Internet targets through these open proxies. Approximately 29,217 devices are potentially affected, mainly distributed in the United States and China. There are no reported patches available at this time.

An issue in the HTTP/2 protocol allows for a denial of service (DoS) through server resource consumption. The flaw stems from the protocol's request multiplexing capability over a single TCP connection, where a client can send a `RST STREAM` frame to cancel a request. In a Rapid Reset attack, an attacker sends a rapid sequence of requests followed by immediate cancellations. This allows the attacker to bypass the server's maximum concurrent stream limit and overload the system, as the server still processes each request and generates logs before the reset occurs. This technique was exploited in the wild between August and October 2023, resulting in record-breaking Layer 7 DDoS attacks. For instance, Google Cloud observed peaks of 398 million requests per second, AWS over 155 million, and Cloudflare 201 million. These attacks can be executed using relatively small botnets of approximately 20,000 machines.