WordPress Modern Events Calendar Lite 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.The WordPress plugin Modern Events Calendar Lite has a cross-site scripting vulnerability that stems fro...

CVE-2021-37975

creationtimestamp| type| source ---|---|--- 2021-10-01 08:56:19+00:00| seen| https://t.me/truesecator/2167 2021-10-01 09:59:25+00:00| exploited| https://t.me/SecLabNews/10975 2021-10-03 16:16:30+00:00| exploited| https://t.me/MHHACKINGtermux/1279 2021-10-03 18:15:53+00:00| exploited|...

This Week in Security News – October 1, 2021

Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, learn about Zloader, a notable recent ZBOT variant. Also, read on a recently introduced bill that would mandate ransom payment reporting...

WordPress Modern Events Calendar Lite plugin <= 5.22.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Shivam Rai in WordPress Modern Events Calendar Lite plugin versions = 5.22.2. Solution Update the WordPress Modern Events Calendar Lite plugin to the latest available version at least 5.22.3...

CVE-2021-23445

creationtimestamp| type| source ---|---|--- 2021-09-27 20:35:00+00:00| seen| https://t.me/cibsecurity/29500 2024-05-29 20:13:05+00:00| seen| https://t.me/KMPteam/1841 2024-05-30 01:51:17+00:00| seen| https://t.me/HackerNewsAR/1101 2024-05-30 07:23:02+00:00| seen| https://t.me/KMPteam/1901...

Cross site scripting

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in...

CVE-2021-38112

creationtimestamp| type| source ---|---|--- 2021-09-22 07:28:28+00:00| seen| https://t.me/cibsecurity/29211 2021-09-22 18:22:12+00:00| seen| https://t.me/informationsecuritychannel/45320 2021-09-23 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4358 2021-09-27...

CVE-2021-22005

creationtimestamp| type| source ---|---|--- 2021-09-22 05:17:02+00:00| seen| https://t.me/thehackernews/1528 2021-09-22 14:26:45+00:00| exploited| https://t.me/ctinow/40137 2021-09-22 22:32:08+00:00| exploited| https://t.me/BleepingComputer/10542 2021-09-22 23:56:16+00:00| seen|...

QLOG - Windows Security Logging

QLOG provides enriched Event Logging for security related events on Windows based systems. It is under heavy development and currently in alpha state. QLOG doesn’t use API hooks and it doesn’t require a driver to be installed on the target system, QLOG only uses ETW to retrieve its telemetry...

CVE-2021-34573

In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events...

Buffer overflow

In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events...

Summer 2021: Friday Night Funkin’, Måneskin and pop it

This summer, several events that were postponed from 2020 due to the pandemic took place. Some of them interested children, while others barely registered by them. It is worth noting that childrens hobbies typically do not change from winter to summer — the only difference is that they devote mor...

Enbra EWM 安全漏洞

Enbra Ewm is a universal reading device from the Czech company Enbra. It uses a radio to read water meters, heating cost indicators and calorimeters. An access control error vulnerability exists in Enbra EWM version 1.7.29, which originates in Enbra EWM and several tested wireless M-Bus sensors,...

Siemens Desigo CC Series CCOM Communication Component Deserialization Vulnerability

Cerberus DMS is a hazard management station that helps users manage fire safety and security incidents.Desigo CC is an integrated building management platform for managing high-performance buildings.Desigo CC Compact expands the portfolio with solutions tailored for small and medium-sized...

CVE-2021-24724

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s...

CISA's Annual National Cybersecurity Summit

CISA will host its fourth annual National Cybersecurity Summit on Wednesdays during the month of October. The 2021 Summit will be held as a series of four virtual events bringing stakeholders together in a forum for meaningful conversation: Oct. 6 - Assembly Required: The Pieces of the...

CVE-2021-0687

creationtimestamp| type| source ---|---|--- 2021-09-09 16:30:47+00:00| seen| https://t.me/truesecator/2087 2021-09-10 15:33:54+00:00| seen| https://t.me/NeKaspersky/1217 2021-10-06 18:32:16+00:00| seen| https://t.me/cibsecurity/30056...

CVE-2021-30671

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder...

CVE-2021-30671

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder...

Input validation

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder...