CVE-2023-41948 WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christoph Rado Cookie Notice & Consent plugin = 1.6.0 versions...

PT-2023-28186 · Christoph Rado · Christoph Rado Cookie Notice & Consent Plugin

Name of the Vulnerable Software and Affected Versions: Christoph Rado Cookie Notice & Consent plugin versions prior to 1.7.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For...

CVE-2023-42468

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

Design/Logic Flaw

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

Color Phone Security Vulnerability

Color Phone is a dialer with the ability to change themes. A security vulnerability exists in Color Phone version 2.1.8-2 and earlier, which originated from a vulnerability that allows remote attackers to initiate a phone call without the user's consent...

CVE-2023-41775

Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...

Improper access control

Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...

CVE-2023-41775

Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent...

"direct" Desktop App for macOS fails to restrict access permissions

Overview "direct" Desktop App for macOS provided by L is B Corp. fails to restrict access permissions CWE-284. The access control mechanism provided by macOS "TCC Transparency Consent and Control" may be bypassed. Koh M. Nakagawa of FFRI Security, Inc. reported this vulnerability to IPA. JPCERT/C...

WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

Software UniConsent Cookie Consent CMP for GDPR / CCPA Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41800 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2b359ed28a55...

CVE-2023-32294

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

CVE-2023-32294 WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

CVE-2023-32294

CVE-2023-32294 – Stored XSS in GDPR Cookie Consent Notice Box plugin for WordPress . Affected: Radical Web Design GDPR Cookie Consent Notice Box plugin versions

CVE-2023-32294 WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Radical Web Design GDPR Cookie Consent Notice Box plugin = 1.1.6 versions...

CVE-2023-4013

CVE-2023-4013 affects the GDPR Cookie Compliance (CCPA, DSGVO, Cookie Consent) WordPress plugin prior to version 4.12.5. The vulnerability is a CSRF issue in license management that could allow an attacker with no special privileges to cause a logged-in admin to update or deactivate the plugin’s ...

WordPress plugin GDPR Cookie Consent Notice Box 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-7917 Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes

From a user's perspective, OAuth works like magic. In just a few keystrokes, you can whisk through the account creation process and gain immediate access to whatever new app or integration you're seeking. Unfortunately, few users understand the implications of the permissions they allow when they...

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill DPDPB after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people's information. "The Bill provides for the processing of...