6008 matches found
CVE-2024-2028 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Covid-19 Stats Widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-2028
The CVE CVE-2024-2028 affects the WordPress plugin Exclusive Addons for Elementor. It enables Stored Cross-Site Scripting via the Covid-19 Stats Widget in all versions up to 2.6.9 due to insufficient input sanitization and output escaping, allowing authenticated attackers with contributor-level a...
CVE-2024-28623
creationtimestamp| type| source ---|---|--- 2024-03-13 09:26:56+00:00| seen| https://t.me/ctinow/206485 2024-03-13 09:26:58+00:00| seen| https://t.me/ctinow/206487 2025-08-19 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2xp2l2v 2025-11-03 21:02:28+00:00| seen...
WordPress Plugin Exclusive Addons for Elementor Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2019-19790
creationtimestamp| type| source ---|---|--- 2024-03-12 09:11:19+00:00| seen| https://t.me/ctinow/205401...
Adobe Animate 23.x < 23.0.4 / 24.x < 24.0.1 Multiple Vulnerabilities (APSB24-19)
The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.4 or 24.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-19 advisory. - Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerabilit...
CVE-2023-52591
creationtimestamp| type| source ---|---|--- 2024-03-06 23:56:57+00:00| seen| https://t.me/ctinow/201936 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-03...
CVE-2023-52586
creationtimestamp| type| source ---|---|--- 2024-03-06 23:46:41+00:00| seen| https://t.me/ctinow/201917 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| published-proof-of-concept|...
CVE-2023-32644
creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:24+00:00| seen| https://t.me/ctinow/201285 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2023-26586
creationtimestamp| type| source ---|---|--- 2024-03-06 10:11:32+00:00| seen| https://t.me/ctinow/201174 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2023-52569
creationtimestamp| type| source ---|---|--- 2024-03-04 19:01:50+00:00| seen| https://t.me/ctinow/199461 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
Exclusive Addons for Elementor < 2.6.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget
Description The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Covid-19 Stats Widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20. A patched version of the package is available...
CVE-2024-26605
creationtimestamp| type| source ---|---|--- 2024-02-24 18:41:44+00:00| seen| https://t.me/ctinow/192679 2024-02-26 17:47:14+00:00| seen| https://t.me/ctinow/193570 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2011-3350
creationtimestamp| type| source ---|---|--- 2024-02-23 19:21:48+00:00| seen| https://t.me/ctinow/192074...
CVE-2024-26595
creationtimestamp| type| source ---|---|--- 2024-02-23 16:32:08+00:00| seen| https://t.me/ctinow/191884 2024-02-23 16:41:50+00:00| seen| https://t.me/ctinow/191908 2024-02-24 12:46:22+00:00| seen| https://t.me/ctinow/192566 2025-12-03 14:14:49+00:00| seen|...
TikTok’s latest actions to combat misinformation shows it’s not just a U.S. problem
When we talk about the term "fake news," most people likely picture a certain person who made the term infamous. And when we talk about misinformation and disinformation, many will remember the "Russian troll farms" that popped up during the 2016 U.S. presidential election and were unmasked and...
CVE-2023-52452
creationtimestamp| type| source ---|---|--- 2024-02-22 18:53:38+00:00| seen| https://t.me/ctinow/191008 2024-02-23 15:11:30+00:00| seen| https://t.me/ctinow/191796 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2024-25610
In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default configuration does not sanitize blog entries of JavaScript, which allows remote authenticated use...