CVE-2024-43154: Missing Authorization

Missing Authorization vulnerability in BracketSpace Advanced Cron Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Cron Manager – debug & control: from n/a through 2.5.9...

PT-2024-30345 · Bracketspace · Advanced Cron Manager

Name of the Vulnerable Software and Affected Versions: Advanced Cron Manager versions prior to 2.5.10 Description: The issue is related to a Missing Authorization vulnerability in BracketSpace Advanced Cron Manager, allowing exploitation of incorrectly configured access control security levels...

This Week in Spring - October 29th, 2024

Hi, Spring fans! How're things? It's almost Halloween! I'm so excited! I'm going as a PHP program. Boooooooo...t. I'm writing this from the amazing Vaadin Create conference in Frankfurt, Germany, about to do my keynote for an amazing, Spring-loving audience here. So, without further ado, let's di...

Traccar 5.1 Code Injection

============================================================================================================================================= | Title : Traccar 5.1 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits ...

RHSA-2012:0304 Red Hat Security Advisory: vixie-cron security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2007:0345 Red Hat Security Advisory: vixie-cron security update

Bulletin has no description...

RHSA-2006:0539 Red Hat Security Advisory: vixie-cron security update

Bulletin has no description...

RHSA-2006:0117 Red Hat Security Advisory: vixie-cron security update

Bulletin has no description...

RHSA-2005:361 Red Hat Security Advisory: vixie-cron security update

Bulletin has no description...

CVE-2024-8731

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-8731

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-8731 Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-8731 Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-8731

CVE-2024-8731 concerns the Cron Jobs plugin for WordPress (versions up to and including 1.2.9). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by using add_query_arg without proper escaping on the URL, enabling unauthenticated attackers to inject scripts in pages executed afte...

WordPress Cron Jobs plugin <= 1.2.9 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Cron Jobs versions = 1.2.9...

CVE-2024-8731: Improper Neutralization of Input During Web Page Generation

The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

WordPress plugin Cron Jobs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-39210 · WordPress · Cron Jobs

Name of the Vulnerable Software and Affected Versions: Cron Jobs plugin for WordPress versions up to, and including, 1.2.9 Description: The Cron Jobs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This...

WordPress Cron Jobs Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)

Software Cron Jobs Type Plugin Vulnerable versions = 1.2.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8731 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d8773fd0a372 Credits vgo0 Required privilege...

VICIdial 2.14-917a Remote Code Execution Vulnerability

An attacker with authenticated access to VICIdial version 2.14-917a as an agent can execute arbitrary shell commands as the root user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective. Title: VICIdial Authenticated Remo...