The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/jscript/ajaxupload/sf-uploader.php file in versions up to, and including, 6.6.0. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
More Stories
kernel-6.6.3-200.fc39 kernel-headers-6.6.3-200.fc39 kernel-tools-6.6.3-200.fc39
FEDORA-2023-a7b89262c6 Packages in this update: kernel-6.6.3-200.fc39 kernel-headers-6.6.3-200.fc39 kernel-tools-6.6.3-200.fc39 Update description: The 6.6.3 stable kernel update contains a number of important...
kernel-6.6.3-100.fc38 kernel-headers-6.6.3-100.fc38 kernel-tools-6.6.3-100.fc38
FEDORA-2023-15deb2e32a Packages in this update: kernel-6.6.3-100.fc38 kernel-headers-6.6.3-100.fc38 kernel-tools-6.6.3-100.fc38 Update description: The 6.6.3 stable kernel update contains a number of important...
USN-6502-3: Linux kernel (NVIDIA) vulnerabilities
Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel...
USN-6520-1: Linux kernel (StarFive) vulnerabilities
Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel...
gmailctl-0.10.7-1.fc39
FEDORA-2023-e3e4e3f51a Packages in this update: gmailctl-0.10.7-1.fc39 Update description: upgrade to v0.10.7, CVE-2023-39325 Read More
gmailctl-0.10.7-1.fc38
FEDORA-2023-6f4c5b6331 Packages in this update: gmailctl-0.10.7-1.fc38 Update description: upgrade to v0.10.7, close rhbz#2249798 Read More