CVE-2024-51608

creationtimestamp| type| source ---|---|--- 2024-11-09 17:16:25+00:00| seen| https://t.me/cvedetector/10393 2026-04-02 09:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miivyavgjb2i...

CVE-2024-8442

The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Blog widget in all versions up to, and including, 3.15.18 due to insufficient input sanitization and output escaping on...

Unwrapping the emerging Interlock ransomware attack

Cisco Talos Incident Response Talos IR recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Our analysis uncovered that the attacker used multiple components in the delivery chain including a Remote Access Tool RAT...

WordPress Prime Slider - Addons For Elementor plugin <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget vulnerability

WordPress Prime Slider - Addons For Elementor plugin = 3.15.18 - Authenticated Contributor+ Stored Cross-Site Scripting via Blog Widget vulnerability discovered by Robert DeVore in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.15.18...

PT-2024-39016 · WordPress · The Prime Slider – Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.15.18 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Blog widget due to insufficient input sanitization and outpu...

CVE-2024-10827

creationtimestamp| type| source ---|---|--- 2024-11-06 03:18:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113433843065977701 2024-11-06 09:34:53+00:00| seen| https://vulnerability.circl.lu/comment/65dab379-0829-483c-b7ec-7176fcaec354 2024-11-06 16:16:20+00:00| seen|...

Exploit for CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Ar...

CVE-2024-51626

creationtimestamp| type| source ---|---|--- 2024-11-04 16:57:19+00:00| seen| https://t.me/cvedetector/9760 2026-04-02 10:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miix46uluv2c...

CVE-2024-50523

creationtimestamp| type| source ---|---|--- 2024-11-04 16:06:56+00:00| seen| https://t.me/cvedetector/9747 2026-04-01 18:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihdowq4lc2u...

Friday Squid Blogging: Squid Sculpture in Massachusetts Building

Great blow-up sculpture. Blog moderation policy. The post Friday Squid Blogging: Squid Sculpture in Massachusetts Building appeared first on Schneier on Security...

CVE-2024-47311

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:21+00:00| seen| https://t.me/cvedetector/9600 2026-04-01 21:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihmmzh2aj2v...

CVE-2024-47302

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:20+00:00| seen| https://t.me/cvedetector/9598 2026-04-01 21:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihljfy6rw23...

CVE-2024-44052

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:16+00:00| seen| https://t.me/cvedetector/9597 2026-04-02 14:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijgqowj7g2i...

CVE-2024-44038

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:15+00:00| seen| https://t.me/cvedetector/9596 2026-04-01 20:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihkfie4xf2a...

CVE-2024-47314

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:14+00:00| seen| https://t.me/cvedetector/9595 2026-04-02 12:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mij6wdoaqk2r...

CVE-2024-47359

creationtimestamp| type| source ---|---|--- 2024-11-01 17:01:06+00:00| seen| https://t.me/cvedetector/9588 2026-04-01 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mihfwgvtck2u...

WordPress Naver Blog plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Naver Blog versions = 1.0...

WordPress Naver Blog Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Naver Blog Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51639 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 5f89994a572e Credits SOPROBRO Required privilege...

In the Dark about Shadow APIs?

I’m often asked about shadow APIs and shadow API parameters—even by people with a lot of experience in the API development space...

CVE-2024-49685

creationtimestamp| type| source ---|---|--- 2024-10-31 11:55:49+00:00| seen| https://t.me/cvedetector/9499 2026-04-02 17:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mijposm3gs2v...