CVE-2023-5167

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

Cross site scripting

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5133 User Activity Log Pro < 2.3.4 - IP Spoofing

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic...

CVE-2023-5133 User Activity Log Pro < 2.3.4 - IP Spoofing

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic...

CVE-2023-5167 User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5167

CVE-2023-5167 affects WordPress plugin User Activity Log Pro

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities

Updates Nov. 02: Identified a third version of the BadCandy implant. Added expected response from the new version of the implant against one of the HTTP requests used to check for infected device. Nov. 1: Observed increase in exploitation attempts since the publication of the proofs-of-concept PO...

WordPress plugin User Activity Log Pro Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability in the WordPre...

Discord, I Want to Play a Game

Discord, I Want to Play a Game By Ernesto Fernández Provecho and David Pastor Sanz Threatray · October 16, 2023 Discord is the first choice for gamers when they want to chat with some friends while playing an online computer game. Moreover, it is also a major choice for users that simply want to...

Discord, I Want to Play a Game

Discord, I Want to Play a Game By Ernesto Fernández Provecho and David Pastor Sanz Threatray · October 16, 2023 Discord is the first choice for gamers when they want to chat with some friends while playing an online computer game. Moreover, it is also a major choice for users that simply want to...

PT-2023-31785 · WordPress · User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: user-activity-log-pro WordPress plugin versions prior to 2.3.4 Description: The issue allows an attacker to manipulate the client IP address value by exploiting the plugin's retrieval of IP addresses from potentially untrusted headers. This c...

WordPress plugin user-activity-log-pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...

A week in security (October 9 - October 15)

Last week on Malwarebytes Labs: Explained: Quishing Update now! Atlassian Confluence vulnerability is being actively exploited Giant health insurer struck by ransomware didn't have antivirus protection Ransomware review: October 2023 Stalkerware activity drops as glaring spying problem is reveale...

Malicious code in xsolla-login-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87428f045bf2e5db5eadeb9cb89e2b190e6c62c05e563676d28d6baaa91c631 The OpenSSF Package Analysis project identified 'xsolla-login-js-sdk' @ 4.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8379 Malicious code in xsolla-paystation-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 805042517f32c5bf86be354525e626c93152ff256ee91fc9cdf74042868bae95 The OpenSSF Package Analysis project identified 'xsolla-paystation-widget' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8378 Malicious code in detoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1f37400081aced14b9ba1ba6d0238fa2210207b1805b6befdd655632c1a65fd The OpenSSF Package Analysis project identified 'detoo' @ 4.0.0 npm as malicious. It is considered malicious because: - The package communicates...

CVE-2023-45270

creationtimestamp| type| source ---|---|--- 2023-10-13 20:29:09+00:00| seen| https://t.me/cibsecurity/72268...

Malicious code in tfb-cip-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32e06870354259889acef36568293e07f1ada3677bafaba74764237fb6fef9d2 The OpenSSF Package Analysis project identified 'tfb-cip-app' @ 7.8.9 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview Betalgo.Open.AI is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's machine,...

Malicious Package

Overview ZendeskApi.Client.V2 is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's...