WordPress WPQA - Builder forms Addon Plugin < 6.1.1 is vulnerable to Cross Site Scripting (XSS)

Software WPQA - Builder forms Addon Type Plugin Vulnerable versions 6.1.1 Fixed in 6.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2375 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b62f23b8b86a Credits Bob Matyas...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

Amazon Linux 2 : php (ALAS-2023-2375)

The version of php installed on the remote host is prior to 5.4.16-46. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2375 advisory. An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5...

CVE-2023-2375

creationtimestamp| type| source ---|---|--- 2023-04-28 18:27:28+00:00| seen| https://t.me/cibsecurity/63063...

CVE-2023-2375

A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2375 Ubiquiti EdgeRouter X Web Management command injection

A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2375

CVE-2023-2375 affects Ubiquiti EdgeRouter X up to version 2.0.9-hotfix.6, specifically the Web Management Interface. The vulnerability is a command injection caused by improper handling of the src argument, with remote exploitation possible and public exploit/public disclosure noted. Connected so...

CVE-2022-2375

The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them. Furthermore, due to the lack of escaping in some of them, it could lead to Stored Cross-Site Scripting issues...

CVE-2022-2375

The CVE-2022-2375 entry corresponds to the WordPress WP Sticky Button plugin versions before 1.4.1, where a lack of authorization/CSRF checks when saving settings allows unauthenticated users to update settings. Some settings are also not escaped, enabling Stored Cross-Site Scripting (XSS) as des...

CVE-2022-2375 WP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS

The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them. Furthermore, due to the lack of escaping in some of them, it could lead to Stored Cross-Site Scripting issues...

openSUSE: Security Advisory for xorg-x11-server (SUSE-SU-2022:2375-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-2375

CVE-2017-2375 concerns an issue in preventing the uploading of CallKit call history to iCloud on Apple iOS. The documented root cause is an internal logic issue, and the impact is that updates for CallKit call history were exposed to iCloud. The vulnerability is addressed in iOS 10.2.1, with the ...

CVE-2019-2375

CVE-2019-2375 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-2375

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.5.3 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

CVE-2021-2375

CVE-2021-2375 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) up to and including version 9.2.5.3. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools; attacks require user interaction. Consequences include unauthorized update/insert/...

Oracle Linux 8 : postgresql:13 (ELSA-2021-2375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2375 advisory. pgaudit 1.5.0-1 - Update to version 1.5.0 Related: 1855776 postgresql 13.3-1 - Update to 13.3 Resolves: 1966338 Fix:...

SUSE: Security Advisory (SUSE-SU-2017:2375-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2650)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for pidgin (EulerOS-SA-2019-2387)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...