CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2024-24150

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:34+00:00| seen| https://t.me/ctinow/196117 2024-02-29 03:03:08+00:00| seen| https://t.me/ctinow/196134 2024-03-12 18:16:54+00:00| seen| https://t.me/ctinow/205953...

CVE-2024-24149

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:32+00:00| seen| https://t.me/ctinow/196116 2024-02-29 03:03:07+00:00| seen| https://t.me/ctinow/196133 2024-03-12 18:16:51+00:00| seen| https://t.me/ctinow/205951...

CVE-2024-24147

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:31+00:00| seen| https://t.me/ctinow/196115 2024-02-29 03:03:03+00:00| seen| https://t.me/ctinow/196132 2024-03-12 18:16:53+00:00| seen| https://t.me/ctinow/205952...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

CVE-2023-27151

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

Design/Logic Flaw

openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number in the Saved Search Activity via the Name, Description, or Activity Number field...

CVE-2023-50905: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

Element Android Security Vulnerability

Element Android is the Android Matrix client provided by Element. A security vulnerability exists in Element Android versions 1.4.3 through 1.6.10, which stems from the presence of an Intent redirection vulnerability that allows a third-party malicious application to initiate internal activity by...

WordPress Plugin WP Activity Log Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

MAL-2024-1043 Malicious code in ux1-ui-kit-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7620ca8f835799b0fb96ecf08f2fec44db42f20adac7a75cc1c21a17c162c5d5 The OpenSSF Package Analysis project identified 'ux1-ui-kit-theme' @ 1.8.85 npm as malicious. It is considered malicious because: - The package...

CVE-2024-25902

creationtimestamp| type| source ---|---|--- 2024-02-28 14:27:12+00:00| seen| https://t.me/ctinow/195479 2024-02-28 14:34:03+00:00| seen| https://t.me/ctinow/195494 2024-03-08 08:26:38+00:00| seen| https://t.me/ctinow/203134...

CVE-2024-26300

creationtimestamp| type| source ---|---|--- 2024-02-28 00:26:17+00:00| seen| https://t.me/ctinow/194986 2024-02-28 00:26:20+00:00| seen| https://t.me/ctinow/194989 2024-03-14 19:27:01+00:00| seen| https://t.me/ctinow/208058...

PT-2024-14003 · WordPress · Melapress Wp Activity Log

Name of the Vulnerable Software and Affected Versions: Melapress WP Activity Log versions through 4.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

CVE-2024-25841

creationtimestamp| type| source ---|---|--- 2024-02-27 18:31:37+00:00| seen| https://t.me/ctinow/194714 2024-02-27 18:36:59+00:00| seen| https://t.me/ctinow/194729 2024-03-14 18:26:46+00:00| seen| https://t.me/ctinow/208015...

CVE-2024-1920

creationtimestamp| type| source ---|---|--- 2024-02-27 15:31:48+00:00| seen| https://t.me/ctinow/194495 2024-02-27 15:36:30+00:00| seen| https://t.me/ctinow/194506 2024-03-14 14:26:26+00:00| seen| https://t.me/ctinow/207752...

8,000+ Domains of Trusted Brands Hijacked for Massive Spam Operation

More than 8,000 domains and 13,000 subdomains belonging to legitimate brands and institutions have been hijacked as part of a sophisticated distribution architecture for spam proliferation and click monetization. Guardio Labs is tracking the coordinated malicious activity, which has been ongoing...

CVE-2014-2902

creationtimestamp| type| source ---|---|--- 2024-02-26 09:12:05+00:00| seen| https://t.me/ctinow/193176...

WP Activity Log < 4.6.2 - Unauthenticated Stored Cross-Site Scripting

Description The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user agent header in versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

MAL-2024-1037 Malicious code in virtuoso-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e312940c270bdfe72147c1582e1a07fef45096820038e878c4f91bdd444c03dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...