CVE-2024-34803: Missing Authorization

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

Cybersecurity researchers have warned that multiple high-severity security vulnerabilities in WordPress plugins are being actively exploited by threat actors to create rogue administrator accounts for follow-on exploitation. "These vulnerabilities are found in various WordPress plugins and are...

Fastly < 1.2.26 - Missing Authorization

Description The Fastly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in versions up to, and including, 1.2.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform...

JA4+ - Suite Of Network Fingerprinting Standards

JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for threat actors, malware detection, session...

WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Fastly versions = 1.2.25...

Fastly < 1.2.26 - Missing Authorization via AJAX actions

Description The Fastly plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on the plugin's AJAX actions in versions up to, and including, 1.2.25. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

WordPress Fastly Plugin <= 1.2.25 is vulnerable to Broken Access Control

Software Fastly Type Plugin Vulnerable versions = 1.2.25 Fixed in 1.2.26 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34803 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e8cf9175cc19 Credits Majed Refaea Required privilege...

WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Fastly versions = 1.2.25...

WordPress Fastly Plugin <= 1.2.25 is vulnerable to Broken Access Control

Software Fastly Type Plugin Vulnerable versions = 1.2.25 Fixed in 1.2.26 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34768 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 070f59834046 Credits Joshua Chan Required privilege...

The Noname Security 3.26 Release Supports Integration with Fastly

...

Fastly VDP: Open Redirect on ███████

The vulnerability was an open redirect issue on the website. A user could be redirected to a malicious site by modifying the "redirecturl" parameter. This could have been exploited for phishing attacks or malware infections...

Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX

How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your organization's threat response Summary of Findings The Network Effect Threat Report offers insights based o...

Malware in perimeterx-fastly-js-edge-template

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in perimeterx-fastly-js-edge-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934118ad5800d3dc8e17c6e7ed99b345399d4eae19e298de4f8a35834f872cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-679 Malicious code in perimeterx-fastly-js-edge-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934118ad5800d3dc8e17c6e7ed99b345399d4eae19e298de4f8a35834f872cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fastly VDP: Cache purge requests are not authenticated

Vulnerability description not provided...

Fastly VDP: CVE-2018-6389 exploitation - using scripts loader

Vulnerability description not provided...

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963: Spring4Shell RCE Exploit This is a python im...

Fastly Secret Disclosure Vulnerability

Fastly suffers from the poor practice of sending a temporary password in plaintext. Correspondence from Fastly declined to comment regarding new discovered vulnerabilities within their website. Poor practices regarding password changes. 1. Reset user password 2. Access link sent 3. Temporary...

Fastly Secret Disclosure

Correspondence from Fastly declined to comment regarding new discovered vulnerabilities within their website. Poor practices regarding password changes. 1. Reset user password 2. Access link sent 3. Temporary password sent plaintext // HTTP POST request POST...