Malicious code in fc-country-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c2e34746019c8babb7529002f310acda6cd4d5f8ae99347e250d6ee9c6fb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-339 Malicious code in fc-country-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c2e34746019c8babb7529002f310acda6cd4d5f8ae99347e250d6ee9c6fb34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-24007

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

CVE-2023-24007

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

CVE-2023-24007 WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

CVE-2023-24007

CVE-2023-24007 is a CSRF vulnerability in the WordPress plugin Admin Block Country (TheOnlineHero Tom Skroza) with affected versions up to 7.1.4. The issue stems from Cross-Site Request Forgery in the plugin, enabling unauthorized actions when a user is authenticated. Public sources in the connec...

CVE-2023-24007 WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in TheOnlineHero - Tom Skroza Admin Block Country plugin = 7.1.4 versions...

WordPress plugin admin-block-country 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks

The prolific Iranian nation-state group known as Charming Kitten is actively targeting multiple victims in the U.S., Europe, the Middle East and India with a novel malware dubbed BellaCiao , adding to its ever-expanding list of custom tools. Discovered by Bitdefender Labs, BellaCiao is a...

2023 Cybersecurity Maturity Report Reveals Organizational Unpreparedness for Cyberattacks

In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate security budgets have risen significantly because of the growing sophistication of attacks and the number of cybersecurity solutions...

Admin Block Country <= 7.1.4 - Cross-Site Request Forgery (CSRF)

The plugin does not protect some of its actions in the adminblockcountryinitialpage function against CSRF attacks, allowing an attacker to modify country blocks or methods on their behalf by tricking a logged in administrator to submit a crafted request...

WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Admin Block Country Type Plugin Vulnerable versions = 7.1.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24007 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3a91506c8122 Credits Mika Required...

SUSE CVE-2004-0746

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

SUSE CVE-2019-14895

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote...

CVE-2023-24276

TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules...

TOTOLINK A7100RU 命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A7100RU V7.4cu.2313B20191024 version, which was discovered to contain a command injection vulnerability via the country parameter of setting/delStaticDhcpRules...

CVE-2015-10059 s134328 Webapplication-Veganguide apiService.js cross site scripting

A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code of the file p05-integration/app/shared/api/apiService.js. The manipulation of the argument country/city leads to cross site scripting. The attack can be...

Webapplication-Veganguide 跨站脚本漏洞

Webapplication-Veganguide is a vegetarian restaurant guide for individual developers. Webapplication-Veganguide suffers from a cross-site scripting vulnerability that stems from the fact that incorrect manipulation of the parameters country/city can lead to cross-site scripting...

PT-2023-10238 · Unknown · S134328 Webapplication-Veganguide

Name of the Vulnerable Software and Affected Versions: s134328 Webapplication-Veganguide affected versions not specified Description: A vulnerability has been found in the s134328 Webapplication-Veganguide, classified as problematic. It affects unknown code of the file...