CVE-2024-35165 WordPress Gutenify plugin <= 1.4.0 - Sensitive Data Exposure via API vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gutenify.This issue affects Gutenify: from n/a through 1.4.0...

CVE-2024-35171 WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...

CVE-2024-34549 WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.2.2...

CVE-2024-34549

CVE-2024-34549: Exposure of Sensitive Information to an Unauthorized Actor in Automattic WP Job Manager (affecting WP Job Manager up to version 2.2.2). The connected Red Hat and Wordfence entries confirm the issue is an Information Exposure vulnerability, exploitable by unauthenticated actors, wi...

CVE-2024-34556

CVE-2024-34556 affects UkrSolution Barcode Scanner with Inventory & Order Manager. The connected Wordfence entry documents an unauthenticated information exposure vulnerability affecting the Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.4. The CVE entry links to a vulnerabi...

APT trends report Q1 2024

For more than six years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research. They provide a representative snapshot of what we have published and...

PT-2024-25963 · Automattic · Wp Job Manager

Name of the Vulnerable Software and Affected Versions: WP Job Manager versions prior to 2.2.3 is not mentioned, however, the issue affects WP Job Manager from n/a through 2.2.2, so WP Job Manager versions through 2.2.2 Description: The issue is related to Exposure of Sensitive Information to an...

CVE-2024-34368

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...

CVE-2024-34382

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Robo Gallery: from n/a through 3.2.18...

CVE-2024-34388

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from n/a through 1.2.5...

CVE-2024-34368 WordPress Mooberry Book Manager plugin <= 4.15.12 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mooberry Dreams Mooberry Book Manager.This issue affects Mooberry Book Manager: from n/a through 4.15.12...

CVE-2024-34368

CVE-2024-34368: Exposure of Sensitive Information to an Unauthorized Actor in Mooberry Book Manager. Affected: Mooberry Book Manager

CVE-2024-34382

CVE-2024-34382 : Robo Gallery (RoboSoft Robo Gallery) is affected by an unauthenticated information exposure up to version 3.2.18. The vulnerability is confirmed in connected documents and has been patched; upgrade to a version newer than 3.2.18 to mitigate.

CVE-2024-34388

Technical details about CVE-2024-34388 are not provided in the connected documents; information remains limited to exposure of sensitive data in Scribit GDPR Compliance plugin. Monitor for official advisories and updates.

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that's vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue, tracked as CVE-2023-49606, carries a CVSS score of 9.8 out of a maximum of 10, per Cisco Talos, which...

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys. Dubbed ArcaneDoor, the activity is said to have commenced...

Exploit for Protection Mechanism Failure in Microsoft

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malic...

CVE-2024-34146

A flaw was found in the Jenkins Git server Plugin, involving inadequate permission validation for reading Git repositories over SSH. Through the manipulation of crafted requests, a malicious actor can attain unauthorized read access to a Git repository over SSH. Subsequently, they could utilize...

CVE-2024-32962

xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional...

CVE-2024-32962 XML signature verification bypass due improper verification of signature / signature spoofing

xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional...