CVE-2016-10891

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

Cross site scripting

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

Cross site scripting

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

CVE-2016-10890

The CVE-2016-10890 entry concerns the WordPress plugin aryo-activity-log, vulnerable before version 2.3.2 to a cross-site scripting (XSS) flaw. Multiple sources (Red Hat, CNVD, OSV, CVE lists, WPVulnDB) consistently describe an XSS condition affecting the plugin for WordPress; exploitation detail...

CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2016-10891

The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...

CVE-2016-10891

The vulnerability CVE-2016-10891 affects the WordPress plugin aryo-activity-log, specifically versions prior to 2.3.3. The issue is a cross-site scripting (XSS) flaw in that plugin. Impact is limited to client-side script execution on sites using affected plugin versions. Remediation is to upgrad...

New ‘Off-Facebook Activity Tool’ lets users control data collected by websites

By Sudais Off-Facebook Activity lets users see a summary of the apps and websites that send Facebook information about their activity. This is a post from HackRead.com Read the original post: New ‘Off-Facebook Activity Tool’ lets users control data collected by websites...

Adult Content Site Exposed Personal Data of 1M Users

The personal information more than a million users of popular adult website Luscious, including email addresses that sometimes indicated full names, were found exposed in an unsecured Elasticsearch database. The website, which focuses on anime-themed, user-uploaded adult content, has over 1 milli...

PT-2019-7687 · WordPress · Aryo-Activity-Log

Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.3 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...

PT-2019-7686 · WordPress · Aryo-Activity-Log

Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.2 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...

Facebook’s New Privacy Feature Comes With a Loophole

"Off-Facebook Activity" will give users more control over their data, but Facebook needs up to 48 hours to aggregate your information into a format it can share with advertisers...

CVE-2019-2121

In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Andro...

Use This Privacy Tool to View and Clear Your 'Off-Facebook Activity' Data

Well, here we have great news for Facebook users, which is otherwise terrible for marketers and publishers whose businesses rely on Facebook advertisement for re-targeted conversations. Following the Cambridge Analytica scandal, Facebook has taken several privacy measures in the past one year wit...

Use This Privacy Tool to View and Clear Your 'Off-Facebook Activity' Data

Well, here we have great news for Facebook users, which is otherwise terrible for marketers and publishers whose businesses rely on Facebook advertisement for re-targeted conversations. Following the Cambridge Analytica scandal, Facebook has taken several privacy measures in the past one year wit...

How Activity Logs Help WordPress Admins Better Manage Website Security

Managing a WordPress website can sap a lot of your time and energy, which otherwise you'd spend on managing your business. If you're looking to cut down on the hours, you spend troubleshooting WordPress technical and security problems, better managing and monitoring your website and users, or you...

How Activity Logs Help WordPress Admins Better Manage Website Security

Managing a WordPress website can sap a lot of your time and energy, which otherwise you'd spend on managing your business. If you're looking to cut down on the hours, you spend troubleshooting WordPress technical and security problems, better managing and monitoring your website and users, or you...

Google Android Media Framework Component Multiple Security Vulnerabilities

Description Google Android is prone to the following security vulnerabilities: 1. Multiple remote-code execution vulnerabilities 2. Multiple privilege-escalation vulnerabilities 3. Multiple information-disclosure vulnerabilities 4. Multiple denial of service vulnerabilities An attacker can...

Zebra Industrial Printers

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Low skill level to exploit Vendor: Zebra Equipment: Industrial Printers Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to send specially crafted packets...

A week in security (August 12 – 18)

Last week on Malwarebytes Labs, we took a look at the potential pitfalls of facial recognition technology, looked at ways domestic abuse survivors can secure their data, and explored the education threat landscape. We also kicked off a series looking at the Hidden Bee infection chain, and put...