CVE-2022-0364

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

Cross site scripting

The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

WordPress plugin Modern Events Calendar Lite 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin Modern Events Calendar Lite 6.4.0 previously...

CVE-2021-42387

creationtimestamp| type| source ---|---|--- 2022-03-16 14:30:16+00:00| seen| https://t.me/truesecator/2737 2022-03-17 15:11:20+00:00| seen| https://t.me/NeKaspersky/2001...

CVE-2021-42390

creationtimestamp| type| source ---|---|--- 2022-03-16 14:30:16+00:00| seen| https://t.me/truesecator/2737 2022-03-17 15:11:20+00:00| seen| https://t.me/NeKaspersky/2001...

SUSE-FU-2022:0868-1 Feature update for tcl and tk

This feature update for tcl and tk fixes the following issues: Update tcl and tk to version 8.6.12 jscSLE-21016, jscSLE-23284: - Move tcl.macros to /usr/lib/rpm/macros.d bsc1185662 - Use FAT LTO objects in order to provide proper static library bsc1138797 - Fix a bug in itcl that was affecting...

systemd bug fix and enhancement update

An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...

WordPress plugin WooCommerce SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. SQL injection vulnerability exists in versions of...

CVE-2022-23037

creationtimestamp| type| source ---|---|--- 2022-03-10 22:12:59+00:00| seen| https://t.me/cibsecurity/38736 2022-03-10 22:13:00+00:00| seen| https://t.me/cibsecurity/38737 2022-03-10 22:13:01+00:00| seen| https://t.me/cibsecurity/38738 2022-03-10 22:13:05+00:00| seen| https://t.me/cibsecurity/387...

CVE-2022-23039

creationtimestamp| type| source ---|---|--- 2022-03-10 22:12:59+00:00| seen| https://t.me/cibsecurity/38736 2022-03-10 22:13:00+00:00| seen| https://t.me/cibsecurity/38737 2022-03-10 22:13:01+00:00| seen| https://t.me/cibsecurity/38738 2022-03-10 22:13:05+00:00| seen| https://t.me/cibsecurity/387...

CVE-2022-23042

creationtimestamp| type| source ---|---|--- 2022-03-10 22:12:59+00:00| seen| https://t.me/cibsecurity/38736 2022-03-10 22:13:00+00:00| seen| https://t.me/cibsecurity/38737 2022-03-10 22:13:01+00:00| seen| https://t.me/cibsecurity/38738 2022-03-10 22:13:05+00:00| seen| https://t.me/cibsecurity/387...

CVE-2022-23040

creationtimestamp| type| source ---|---|--- 2022-03-10 22:12:59+00:00| seen| https://t.me/cibsecurity/38736 2022-03-10 22:13:00+00:00| seen| https://t.me/cibsecurity/38737 2022-03-10 22:13:01+00:00| seen| https://t.me/cibsecurity/38738 2022-03-10 22:13:05+00:00| seen| https://t.me/cibsecurity/387...

RagnarLocker ransomware gang breached 52 critical infrastructure organizations

In a FLASH publication issued by the FBI in coordination with DHS/CISA, the FBI says it has identified at least 52 organizations across 10 critical infrastructure sectors affected by RagnarLocker ransomware, including organizations in the critical manufacturing, energy, financial services,...

CVE-2022-25636

creationtimestamp| type| source ---|---|--- 2022-03-07 14:16:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1601 2022-03-07 14:34:43+00:00| seen| https://t.me/GithubRedTeam/1602 2022-03-09 10:01:49+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1790 2022-03-09...

WordPress Plugin Authorization Issue Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the Advanced Cron Manager WordPress plugin and the Advanced Cro...

CVE-2022-20754

creationtimestamp| type| source ---|---|--- 2022-03-03 13:14:13+00:00| seen| https://t.me/truesecator/2693 2022-03-03 19:53:52+00:00| seen| https://t.me/NeKaspersky/1922 2022-04-06 22:30:44+00:00| seen| https://t.me/cibsecurity/40263 2026-07-29 12:03:12+00:00| seen| https://t.me/cisoclub/1345...

CVE-2022-22944

VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...

mail.mieten.events Improper Access Control vulnerability OBB-2388174

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Slider Addons for The Events Calendar plugin < 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Slider Addons for The Events Calendar plugin versions 1.0.1. Solution Update the WordPress Slider Addons for The Events Calendar plugin to the latest available version at least 1.0.1...

WordPress Subscriber Addons for The Events Calendar plugin < 2.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Subscriber Addons for The Events Calendar plugin versions 2.0.1. Solution Update the WordPress Subscriber Addons for The Events Calendar plugin to the latest available version at least 2.0.1...