8661 matches found
CVE-2024-53740
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSwings WooCommerce Ultimate Gift Card woocommerce-ultimate-gift-card allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card: from n/a through 2.9.1...
CVE-2024-53740
CVE-2024-53740 is a reflected XSS in the WordPress plugin “WooCommerce Ultimate Gift Card” (notFound variant) prior to version 2.9.1. The issue arises from improper input neutralization during web page generation, allowing attacker-controlled input to be reflected in a page. Affected product: Woo...
WordPress plugin WooCommerce Ultimate Gift Card 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PUB-A-319068397
Bulletin has no description...
WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WooCommerce Ultimate Gift Card versions 2.9.1...
Malicious code in item-card-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81192c32a32a9e65a9df93f0952d9c598fd305d701d0495d10d44368c38f291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11044 Malicious code in item-card-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a81192c32a32a9e65a9df93f0952d9c598fd305d701d0495d10d44368c38f291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ALSA: Core: Fix for NULL module pointer assignment at card init The commit 81033c6b584b “ALSA: Core: Warn on empty module” introduced a WARNON function for handling NULL module pointers passed during object creation using sndcard...
NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data
Threat hunters are warning about an updated version of the Python-based NodeStealer that's now equipped to extract more information from victims' Facebook Ads Manager accounts and harvest credit card data stored in web browsers. "They collect budget details of Facebook Ads Manager accounts of the...
The vulnerability of the Linux operating system’s kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel component is related to incorrect calculations in the mmcblkioctlcmd function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments
Threat actors are increasingly banking on a new technique that leverages near-field communication NFC to cash out victim's funds at scale. The technique, codenamed Ghost Tap by ThreatFabric, enables cybercriminals to cash-out money from stolen credit cards linked to mobile payment services such a...
Cross-site Scripting (XSS)
Overview djangocms-attributes-field is an Adds attributes to Django models. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization of form Attributes fields in the Django CMS admin panel. An attacker can exploit this vulnerability through the...
An Interview With the Target & Home Depot Hacker
In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator , the nickname used by a Russian cybercriminal who sold more than 100 million payment cards stolen from Target and Home Depot between 2013 and 2014. Moscow resident Mikhail Shefel , who confirmed using the Rescator...
Fedora 37 : qemu (2022-4387579e67)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4387579e67 advisory. vga: avoid crash if no default vga card rhbz2095639 lsi53c895a: fix use-after-free in lsidomsgout CVE-2022-0216 vnc-clipboard: fix integer underflow...
Malicious code in item-card-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fe1ad3ce02c3601d3fc25ac4e132de1092b4bd43cf8011efdfb6aaa0c894c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10672 Malicious code in item-card-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fe1ad3ce02c3601d3fc25ac4e132de1092b4bd43cf8011efdfb6aaa0c894c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Warning: Online shopping threats to avoid this Black Friday and Cyber Monday
.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id1206714424da-98margin-top:0px;margin-bottom:var--global-kb-spacing-xl, 4rem;.kb-row-layout-id1206714424da-98 .kt-row-column-wrapalign-content:center;:where.kb-row-layout-id1206714424da-98 .kt-row-column-wrap...
kernel: mmc: toshsd: fix return value check of mmc_add_host()
A flaw was found in the Linux kernel's Toshiba SD/MMC card reader driver toshsd. The driver fails to check the return value of mmcaddhost. If this function fails, memory allocated by mmcallochost is leaked, and a subsequent driver removal attempt will crash the kernel by trying to delete a device...
kernel: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxusbsdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not...