244 matches found
CVE-2024-53785
CVE-2024-53785 : WordPress Chatter plugin
CVE-2024-53785: Missing Authorization
Missing Authorization vulnerability in Alexander Volkov Chatter.This issue affects Chatter: from n/a through 1.0.1...
CVE-2024-50532
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jerin K Alexander Events Manager Pro – extended events-manager-pro-extended allows Reflected XSS.This issue affects Events Manager Pro – extended: from n/a through = 0.1...
CVE-2024-51867
CVE-2024-51867 is a stored XSS vulnerability in the WordPress plugin “Simpul Events by Esotech” (versions up to 1.8.5). Root cause: improper neutralization of input during web page generation. Impact per sources: stored payloads could be injected into pages; CVSS v3.1 base 6.5 (Network attack, us...
WordPress Safe SVG plugin < 2.2.6 - Author+ Cross Site Scripting (XSS) vulnerability
Author+ Cross Site Scripting XSS vulnerability discovered by Alexander Concha in WordPress Plugin Safe SVG versions 2.2.6...
Man Arrested for Snowflake Hacking Spree Faces US Extradition
Alexander “Connor” Moucka was arrested this week by Canadian authorities for allegedly carrying out a series of hacks that targeted Snowflake’s cloud customers. His next stop may be a US jail...
Canadian Man Arrested in Snowflake Data Extortions
A 25-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. Image: https://www.pomerium.com/blog/the-real-lessons-from-the-snowflake-breach On October 30, Canadian authorities arrested...
CVE-2024-49669
Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...
CVE-2024-49669 WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...
CVE-2024-49669: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...
CVE-2024-49614
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SermonAudio SermonAudio Widgets sermonaudio-widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through = 1.9.3...
CVE-2024-49614 WordPress SermonAudio Widgets plugin <= 1.9.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3...
CVE-2024-49614
CVE-2024-49614 is a SQL Injection vulnerability in the WordPress plugin SermonAudio Widgets . The issue affects versions listed as “n/a through 1.9.3” and stems from improper neutralization of special elements used in SQL commands. Public references describe the vulnerability but do not provide c...
IronNet Has Shut Down
After retiring in 2014 from an uncharacteristically long tenure running the NSA and US CyberCommand, Keith Alexander founded a cybersecurity company called IronNet. At the time, he claimed that it was based on IP he developed on his own time while still in the military. That always troubled me...
CVE-2024-47643
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de Widgets: from n/a through = 4.0.0...
CVE-2024-47643 WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de Widgets: from n/a through = 4.0.0...
CVE-2024-47643
CVE-2024-47643 affects WordPress plugin Include Fussball.de Widgets
WordPress WP Accessibility Helper (WAH) Plugin <= 0.6.2.8 is vulnerable to Broken Access Control
Software WP Accessibility Helper WAH Type Plugin Vulnerable versions = 0.6.2.8 Fixed in 0.6.2.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5987 Patch priority Low CVSS severity Low 5.4 Developer Alexander Volkov PSID d7cc8b0ae32e Credits Lucio Sá...
WordPress WP Accessibility Helper (WAH) Plugin <= 0.6.2.9 is vulnerable to Broken Access Control
Software WP Accessibility Helper WAH Type Plugin Vulnerable versions = 0.6.2.9 Fixed in 0.6.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37926 Patch priority Low CVSS severity Low 5.3 Developer Alexander Volkov PSID 2dc3899d68ab Credits Mika Required...
