CVE-2024-6283

CVE-2024-6283 : DethemeKit For Elementor (WordPress) versions up to 2.1.5 are vulnerable to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget. Exploitation requires authentication at contributor level or higher, enabling injection of scripts that run when users click the ...

PT-2024-37511

Name of the Vulnerable Software and Affected Versions: DethemeKit For Elementor plugin for WordPress versions up to and including 2.1.5 Description: The issue is related to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget due to insufficient input sanitization and output...

CVE-2024-6283: Improper Neutralization of Input During Web Page Generation

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget in all versions up to and including 2.1.5 due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible fo...

chateau-de-rochecotte.com Cross Site Scripting vulnerability OBB-3938845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

radelier-de-la-loue.asso-web.com Cross Site Scripting vulnerability OBB-3938608

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in updated-tricks-roblox-robux-generator-2023-de-lslok7 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-roblox-robux-generator-2023-de-ldfdf (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2174 Malicious code in down_load_ebook_de_kracht_in_jezelf_by_joseph_murphy_gnus5 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2172 Malicious code in down_load_ebook_de_elskende_fra_prag_by_alyson_richman_g4f5c (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2156 Malicious code in down_load_ebook_chasseur_de_terroristes_by_lionel_d_annemie_bulte_y2bne (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2154 Malicious code in down_load_ebook_causa_de_la_muerte_by_richard_shepherd_2a7ov (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2151 Malicious code in down_load_ebook_cambiemos_de_via_by_edgar_morin_s4uv8 (npm)

--- -= Per source details. Do not edit below this line.=-...

pieces-de-theatre.fr Cross Site Scripting vulnerability OBB-3938414

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gites-de-france-04.fr Cross Site Scripting vulnerability OBB-3936910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wortwolke24.de Cross Site Scripting vulnerability OBB-3936615

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today...

MAL-2024-1544 Malicious code in ing-feat-uilib-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f769907d697965156a8e9bf41f236f4b6f9cd732f198cecad3b96e20bf35f81c The OpenSSF Package Analysis project identified 'ing-feat-uilib-de' @ 200.0.0 npm as malicious. It is considered malicious because: - The packag...

[SECURITY] Fedora 40 Update: qt5ct-1.1-24.fc40

qt5ct allows users to configure Qt5 settings theme, font, icons, etc. under DE/WM without Qt integration...

CVE-2024-5418

CVE-2024-5418 : The DethemeKit For Elementor WordPress plugin has a Stored Cross-Site Scripting (XSS) flaw in the De Product Tab & Slide widget via the slitems attribute. The issue affects all versions up to 2.1.4 due to insufficient input sanitization and output escaping for user-supplied attrib...

cleverdeal24.de Cross Site Scripting vulnerability OBB-3931814

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...