MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As ...
Continue reading
A security issue has been identified in the Ninja Tables Pro WordPress plugin, a tool many site owners use to create and manage tables on their websites. A tampered, unsafe version of the plugin (version 5.2.11) was distributed via a decommissioned, no-longer-active update server for the plugin, rather than the legitimate secure build.The hidden ...
Continue reading
A security flaw has been identified in version 6.2.7 of Fluent Forms Pro, a popular WordPress plugin used to add contact forms, surveys and other input fields to websites. This flaw comes from a tampered, malicious version of the plugin that was accidentally distributed to users via an old, no-longer-active update server.The malicious version of ...
Continue reading
AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in AlanWeb SCADA version 9.8.5Source: NVD (National Vulnerability ...
Continue reading
