1356 matches found
WordPress GDPR CCPA Compliance Support plugin <= 2.3 - Insecure Deserialization / Unauthenticated PHP Object Injection vulnerability
Insecure Deserialization / Unauthenticated PHP Object Injection vulnerability found by NinTechNet in WordPress GDPR CCPA Compliance Support plugin versions = 2.3. Solution Update the WordPress GDPR CCPA Compliance Support plugin to the latest available version at least 2.4...
GDPR CCPA Compliance Support < 2.4 - Unauthenticated PHP Object Injection
The GDPR CCPA Compliance Support WordPress plugin was vulnerable to an Unauthenticated PHP Object Injection security vulnerability. The vulnerability could triggered within the "njtgdprallowpermissions" Base64 encoded cookie value...
lka.spbgasu.ru GDPR PII Exposure vulnerability OBB-1470000
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jira.globalprocessing.ae GDPR PII Exposure vulnerability OBB-1467826
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jira.deiser.com GDPR PII Exposure vulnerability OBB-1467824
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jira.platform.mnscorp.net GDPR PII Exposure vulnerability OBB-1467823
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
munchie.co.za GDPR PII Exposure vulnerability OBB-1447735
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
What's New in Customer Identity and Access Management
We all know that the ability to accurately identify, understand, and engage our customers across multiple channels and digital touchpoints is absolutely vital to the digital customer experience and business. This couldn't be more important in the current environment as we continue to move more of...
VideoBytes: Ransomware gets wasted!
Hello dear readers, and welcome to the latest edition of VideoBytes! On todays episode, were talking about how ransomware is on the rise again, focused on attacking corporations with malware that not only encrypts files, but also steals it. The tactics used to deploy these forms of ransomware hav...
Bug Bounty FAQ: Top Questions, Expert Answers
Seldom does Threatpost have the privilege to tap the collective brain trust of one cybersecurity corner of the threat landscape. But last month, Threatpost brought together leading voices in the bug bounty community to participate in a webinar Five Essentials for Running a Successful Bug Bounty...
cwicsocal18.ics.uci.edu GDPR PII Exposure vulnerability OBB-1351986
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
students.ics.uci.edu GDPR PII Exposure vulnerability OBB-1351981
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kinder-herzstiftung.de Cross Site Scripting vulnerability OBB-1340672
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Report: 97% of Cybersecurity Companies Have Leaked Data on the Dark Web
In a new report into the global cybersecurity industry's exposure on the Dark Web this year, global application security company, ImmuniWeb, uncovered that 97% of leading cybersecurity companies have data leaks or other security incidents exposed on the Dark Web, while on average, there are over...
Top Security and Data Privacy Regulations for Financial Services
Regulatory compliance has become an increasingly more important part of the financial services industry in recent years. And it’s a trend that’s likely to continue due to the upsurge in cloud computing, the use of mobile applications, and a shift to IoT devices, all of which are driving exponenti...
CVE-2020-20628
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS...
CVE-2020-20628
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS...
Cross site scripting
controller/controller-comments.php in WP GDPR plugin through 2.1.1 has unauthenticated stored XSS...
CVE-2020-20628
The CVE-2020-20628 entry concerns the WP GDPR plugin up to version 2.1.1, where controller/controller-comments.php is vulnerable to unauthenticated stored XSS. This is the concrete issue described in NVD/NVD-derived entries. Impact, as stated, is user-controlled script execution due to stored XSS...
