892 matches found
WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
Software Custom 404 Pro Type Plugin Vulnerable versions = 3.10.0 Fixed in 3.10.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51540 Patch priority Medium CVSS severity Medium 7.1 Developer Kunal Nagar PSID ae8e6b89c98e Credits Kyle Sanchez Required privilege...
WordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection
Software 404 Solution Type Plugin Vulnerable versions = 2.34.0 Fixed in 2.35.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50848 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 295d8959acb7 Credits Muhammad Daffa Required privilege Administrator...
404 Solution < 2.33.1 - Sensitive Information Exposure
Description The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.33.0. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7...
CVE-2023-47530
CVE-2023-47530 affects the WordPress plugin WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs (<= v1.8.7). Root cause: SQL injection due to improper neutralization of input in the plugin’s SQL queries. Impact per sources: high/severe risk (CVSS ~7.2). Affected versions:
WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Redirect 404 Error Page to...
OESA-2023-1911 python-twisted security update
Twisted is an event-based framework for internet applications, supporting Python 2.7 and Python 3.5+. It includes modules for many different purposes, including the following: Security Fixes: Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host...
pocsuite3
This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...
Afuzz - Automated Web Path Fuzzing Tool For The Bug Bounty Projects
Afuzz is an automated web path fuzzing tool for the Bug Bounty projects. Afuzz is being actively developed by @rapiddns Features Afuzz automatically detects the development language used by the website, and generates extensions according to the language Uses blacklist to filter invalid pages Uses...
WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection
Software Redirect 404 Error Page to Homepage or Custom Page with Logs Type Plugin Vulnerable versions = 1.8.7 Fixed in 1.8.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-47530 Patch priority Medium CVSS severity Medium 7.6 Developer Claim ownership PSID c586c5b28368 Credit...
Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2023-404)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-404 advisory. A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the...
The vulnerability of the Custom 404 Pro plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.
The vulnerability of the Custom 404 Pro plugin of the WordPress content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
WordPress 404 Solution Plugin < 2.34.0 is vulnerable to SQL Injection
Software 404 Solution Type Plugin Vulnerable versions 2.34.0 Fixed in 2.34.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE N/A Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 0d83dbf66dc5 Credits WordFence Required privilege Administrator Published 26 October...
Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023
More than 17,000 WordPress websites have been compromised in the month of September 2023 with a malware known as Balada Injector, nearly twice the number of detections in August. Of these, 9,000 of the websites are said to have been infiltrated using a recently disclosed security flaw in the tagD...
New Magecart Attack Uses 404 Errors to Steal Your Card Data
By Deeba Ahmed Be cautious of scammers employing a new and convincing trick to steal your payment card data through a Magecart attack. This is a post from HackRead.com Read the original post: New Magecart Attack Uses 404 Errors to Steal Your Card Data...
New Magecart Campaign Alters 404 Error Pages to Steal Shoppers' Credit Cards
A sophisticated Magecart campaign has been observed manipulating websites' default 404 error page to conceal malicious code in what's been described as the latest evolution of the attacks. The activity, per Akamai, targets Magento and WooCommerce websites, with some of the victims belonging to...
The Art of Concealment: A New Magecart Campaign That’s Abusing 404 Pages
...
Oracle Linux 7 : php (ELSA-2020-1112)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1112 advisory. - fix underflow in envpathinfo in fpmmain.c CVE-2019-11043 - fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584 - fix out-of-bounds re...