4383 matches found
CVE-2024-6328
The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebasesmslogin' and 'firebasesmsloginv2' functions...
CVE-2024-6385
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows an attacker to trigger a pipeline as another user under certain circumstances...
Malicious code in sap-as (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93f29c39b0fbe0dbf454927f2f6ee05e0adbb099f497b8dcc9f3e5ced8bb2ea1 The OpenSSF Package Analysis project identified 'sap-as' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...
Mozilla Firefox Save As Data Compromise
The vulnerability of the “Save As” function in Mozilla Firefox, Firefox ESR, and the Thunderbird email client on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to influence the confidentiality and integrity of...
Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites
An analysis of information-stealing malware logs published on the dark web has led to the discovery of thousands of consumers of child sexual abuse material CSAM, indicating how such information could be used to combat serious crimes. "Approximately 3,300 unique users were found with accounts on...
New Ransomware-as-a-Service 'Eldorado' Targets Windows and Linux Systems
An emerging ransomware-as-a-service RaaS operation called Eldorado comes with locker variants to encrypt files on Windows and Linux systems. Eldorado first appeared on March 16, 2024, when an advertisement for the affiliate program was posted on the ransomware forum RAMP, Singapore-headquartered...
WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Cronus Patchstack Alliance in WordPress Plugin Save as PDF versions = 4.0.0...
WordPress Save as PDF plugin by Pdfcrowd Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37549 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5b92af9f47f3 Credits Cronus Required privile...
Simplifying Infrastructure Management with Imperva’s Terraform Module for Cloud WAF
In todays rapidly evolving technological landscape, managing infrastructure efficiently is paramount for businesses striving to stay competitive. With the rise of cloud computing, Infrastructure as Code IaC has emerged as a game-changer, enabling organizations to automate the provisioning and...
RHEL 8 : 389-ds (RHSA-2024:4235)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4235 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...
CVE-2024-38521
Vulnerability: CVE-2024-38521 affects Hush Line prior to version 0.1.0, with a stored XSS in the Inbox. The input is displayed using the safe Jinja2 attribute, and is not sanitized on display. Root cause (from PT-2024-28049): mis-handling of user-controlled input in the Inbox leads to stored XSS....
Malicious code in acts-as_subscribable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_publicable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_multilingual (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_localized (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_list_with_sti_support (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_liked (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_likeable (RubyGems)
--- -= Per source details. Do not edit below this line.=-...