competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2025-48889 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

PT-2025-1687

Name of the Vulnerable Software and Affected Versions SweepWidget Contests, Giveaways, Photo Contests, Competitions plugin for WordPress versions up to, and including, 2.0.6 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'sweepwidget' shortcode due to insufficien...

CVE-2024-11756: Improper Neutralization of Input During Web Page Generation

The SweepWidget Contests, Giveaways, Photo Contests, Competitions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sweepwidget' shortcode in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping on user supplied...

WordPress plugin SweepWidget Contests, Giveaways, Photo Contests, Competitions 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress SweepWidget Contests, Giveaways, Photo Contests, Competitions plugin <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin SweepWidget Contests, Giveaways, Photo Contests, Competitions versions = 2.0.6...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-47871 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-47872 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-47872 Source advisory: OSV:GHSA-GVV6-33J7-884G...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-47871 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-47871 Source advisory: OSV:GHSA-279J-X4GX-HFRH...

competitions (>=0.1.2, <=0.1.3), pixelyai-core (>=0.0.1, <=0.0.11) potentially affected by CVE-2024-47868 via gradio (4.12.0)

gradio PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - competitions =0.1.2, =0.0.1, =0.0.11 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

How to Avoid the Worst Instagram Scams

Fake sellers. Competitions. Crypto cons. There are plenty of grifts on the platform, but you don’t have to get sucked in...

Get to Know Steve Povolny

Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...

How a leading Microsoft engineer extends culture to service resiliency

It’s hard to underestimate the impact that people can have on us in our formative years. Huiwen Ru, who spent several years working in identity and access management and is now a Principal Software Engineering Manager on the Singularity team at Microsoft, is a living example of how important...

architecturecompetitions.com Cross Site Scripting vulnerability OBB-2132751

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Closing the Gap: An Exciting Initiative to Drive More Gender Diversity in Tech

We all know there’s a global IT skills crisis. In cybersecurity things are even worse, with a shortfall of nearly three million roles estimated today — 500,000 of which are in North America. Today women comprise just 24% of the workforce yet half of the global population. Why is this? Women were...

Security Competition Infrastructure Automation Framework: Laforge

Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for highly productive remote collaboration. The Laforge engine uses a...

competitions.com.au XSS vulnerability

Open Bug Bounty ID: OBB-385708 Description| Value ---|--- Affected Website:| competitions.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Facebook Capture The Flag Platform Open Source

If you’ve been to DEF CON or any number of other technical hacker conferences, you’re familiar with Capture the Flag contests. These events pit teams of hackers and researchers against each other in a series of challenges until a winner is determined. Capture the Flag is also a valuable teaching...

barryvan compo manager 0.5pre-1 - Remote File Inclusion Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title:...

Joomla Component Recly!Competitions 1.0.0 - Multiple RFI Vulnerabilities

No description provided by source. ============================================================================================================================================================= o Recly!Competitions Component 1.0.0 Multiple Remote File Inclusion Vulnerability Software :...

Joomla Competitions SQL Injection

======================================================================= Joomla Component comcompetitions SQL Injection ======================================================================= Joomla Component comcompetitions SQL Injection Date: 29/11/2010 Author: s4r4d0 Contact: s4r4d0atyahoodotco...