The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. This makes it possible for unauthenticated attackers to discover the hidden login page location.
Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's format method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5.
WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of archive files. When opening an archive that bears the Mark-of-the-Web, WinZip removes the Mark-of-the-Web from the archive file. Following extraction, the extracted files also lack the Mark-of-the-Web. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-23983.
The Lock User Account plugin for WordPress is vulnerable to user lock bypass in all versions up to, and including, 1.0.5. This is due to permitting application password logins when user accounts are locked. This makes it possible for authenticated attackers, with existing application passwords, to interact with the vulnerable site via an API such as XML-RPC or REST despite their account being locked.
CVE-2024-43585 is a vulnerability in Microsoft Windows 10 Version 1809 and related builds that allows bypassing the Code Integrity Guard security feature. This flaw is classified as a Protection Mechanism Failure (CWE-693). It affects multiple Windows 10 versions prior to specific fixed releases. The vulnerability has a medium severity rating with a CVSS score of 5.5. An official fix is available from Microsoft.
CVE-2024-43584 is a security feature bypass vulnerability in the Windows Scripting Engine affecting Microsoft Windows 11 version 21H2 and related builds. The flaw allows an attacker with local access to bypass security protections, potentially leading to high impact on confidentiality and integrity without requiring user interaction. Microsoft has released official fixes for affected versions.
CVE-2024-43513 is a vulnerability in Microsoft Windows 10 Version 1507 related to a protection mechanism failure in the BitLocker security feature. It allows a security feature bypass that could lead to confidentiality, integrity, and availability impacts. The vulnerability affects multiple Windows 10 builds and has been assigned a medium severity rating with a CVSS score of 6.4. Microsoft has released official fixes for the affected versions.
Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parallels software on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
The specific flaw exists within the Updater service. The issue results from the lack of proper validation of version information before performing an update. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-19481.
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Dropbox Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of shared folders. When syncing files from a shared folder belonging to an untrusted account, the Dropbox desktop application does not apply the Mark-of-the-Web to the local files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-23991.
CVE-2024-31142 is a vulnerability in Xen related to incorrect logic in the mitigations for Branch Type Confusion (BTC) and Speculative Return Stack Overflow (SRSO) on x86 architectures. Due to a logical error in the implementation of the BTC mitigation (XSA-407), the mitigation does not apply correctly when intended. The SRSO mitigation (XSA-434), which uses the same infrastructure, is similarly affected. This flaw can lead to high impact on confidentiality, integrity, and availability.