CVE-2021-24552

The CVE-2021-24552 entry concerns the WordPress plugin Simple Events Calendar (versions

Wordpress Plugin Timeline Calendar SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. Wordpress Plugin Timeline Calendar A SQL...

Wordpress Plugin Simple Events Calendar SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the...

CVE-2016-20011

creationtimestamp| type| source ---|---|--- 2021-08-22 22:21:55+00:00| seen| https://t.me/cibsecurity/27667 2021-08-22 22:21:56+00:00| seen| https://t.me/cibsecurity/27668 2021-08-22 22:21:57+00:00| seen| https://t.me/cibsecurity/27669 2021-08-22 22:21:59+00:00| seen| https://t.me/cibsecurity/276...

WordPress Modern Events Calendar Plugin Remote Code Execution (CVE-2021-24145)

A remote code execution vulnerability exists in WordPress Modern Events Calendar Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the X Window System graphical server, as well as the ALT Linux, ROSA Linux, MSVSfer operating systems, allows attackers to increase their privileges.

The vulnerability of the X Window System graphical server, as well as operating systems like ALT Linux and ROSA Linux, is related to deficiencies in access control when transmitting window events initiated by low-privilege graphical applications to windows with high privileges. Exploiting this...

Exploit for Unrestricted Upload of File with Dangerous Type in Webnus Modern_Events_Calendar_Lite

CVE-2021-24145 WordPress File Upload Vulnerability, Modern Eve...

Game On: A Summer of Cybercrime Reveals Evolving Bot Threat

Fans around the world clamored online, and even in-person, over the past several weeks to enjoy the thrill of competition. From the Tour De France and EURO 2020 tournament in June to the recent Summer Olympic Games in Tokyo, fans were eager to cheer on their nations and make a little money in the...

CVE-2021-37697

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific membership event message. Issue is patched in commit d63c49b4cfc30c795336e4fff08cba3795e0fcc0. As a...

CVE-2021-38085

creationtimestamp| type| source ---|---|--- 2021-08-11 20:12:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/canondriverprivesc.rb 2021-08-11 22:38:39+00:00| seen| https://t.me/cibsecurity/27184 2021-08-20 02:37:24+00:00|...

Missing events/timelocks for owner/admin only functions that change critical parameters

Handle 0xRajeev Vulnerability details Impact Owner/admin only functions that change critical parameters should emit events and have timelocks. Events allow capturing the changed parameters so that off-chain tools/interfaces can register such changes with timelocks that allow users to evaluate the...

FreeBSD : xtrlock -- xtrlock does not block multitouch events (e80073d7-f8ba-11eb-b141-589cfc007716)

Debian reports : xtrlock did not block multitouch events so an attacker could still input and thus control various programs such as Chromium, etc. via so-called 'multitouch' events including pan scrolling, 'pinch and zoom' or even being able to provide regular mouse clicks by depressing the...

WordPress Events Shortcodes & Templates For The Events Calendar plugin <= 1.7.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress Events Shortcodes & Templates For The Events Calendar plugin versions = 1.7.1. Solution Update the WordPress Events Shortcodes & Templates For The Events Calendar plugin to the latest available versio...

AZL-6586 CVE-2021-38202 affecting package kernel for versions less than 5.10.78.1-1

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

Sharing the first SimuLand dataset to expedite research and learn about adversary tradecraft

Last month, we introduced the SimuLand project to help security researchers around the world deploy lab environments to reproduce well-known attack scenarios, actively test detections, and learn more about the underlying behavior and implementation of adversary techniques. Since the release of th...

WordPress The Community Events plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The Community Events plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...

Fortinet FortiManager and Fortinet FortiAnalyzer Environment Issue Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. Fortinet FortiAnalyzer is a centralized network security reporting solution that allows for centralized management of any number of Fortinet devices and the ability to group devices into different...

CVE-2021-20332

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

Design/Logic Flaw

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

CVE-2021-24496

The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in...