Malicious code in cash-app-money-generator-new-2023-update-a566ea (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1864 Malicious code in cash-app-money-generator-new-2023-update-a566ea (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dtx-company/flowcode-generator-types (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2380 Malicious code in @dtx-company/flowcode-generator-types (npm)

--- -= Per source details. Do not edit below this line.=-...

Ease the Burden with AI-Driven Threat Intelligence Reporting

Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill's threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you can do to mitigate risk. Cybersecurity...

Cruddiy Command Injection Vulnerability

Cruddiy is a free no-code PHP bootstrap CRUD generator by Jan van den Berg, a personal developer. A security vulnerability exists in Cruddiy that stems from vulnerability to shell command injection attacks...

PT-2024-23092 · Apache · Apache Streampipes

Name of the Vulnerable Software and Affected Versions: Apache StreamPipes versions 0.69.0 through 0.93.0 Description: The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG in the user self-registration and password recovery mechanism. This allows an...

CVE-2024-3610

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctgeasychildtheme function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child theme...

CVE-2024-3610 WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctgeasychildtheme function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child theme...

CVE-2024-3610

CVE-2024-3610 affects the WP Child Theme Generator plugin for WordPress. The underlying issue is a missing capability check in wctg_easy_child_theme(), allowing unauthenticated attackers to create a blank child theme and activate it, potentially whitescreening the site. Affected versions are all ...

WordPress plugin WP Child Theme Generator security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Child Theme Generator plugin <= 1.1.1 - Unauthenticated Child Theme Creation/Activation vulnerability

Unauthenticated Child Theme Creation/Activation vulnerability discovered by Lucio Sá in WordPress Plugin WP Child Theme Generator versions = 1.1.1...

WordPress WP Child Theme Generator Plugin <= 1.1.1 is vulnerable to Broken Access Control

Software WP Child Theme Generator Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3610 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0ee7eb453287 Credits Lucio Sá Requir...

PT-2024-26891 · WordPress · Wp Child Theme Generator

Name of the Vulnerable Software and Affected Versions: WP Child Theme Generator plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is related to a missing capability check on the wctg easy child theme function, allowing unauthorized modification of data. This enables...

OPENSUSE-SU-2024:11729-1 zram-generator-1.1.1~git5.8612dbb-1.1 on GA media

These are all security issues fixed in the zram-generator-1.1.1git5.8612dbb-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-37394

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0...

CVE-2023-37394

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0...

CVE-2023-37394 WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0...

CVE-2023-37394

CVE-2023-37394 affects the WordPress WP Dummy Content Generator plugin up to version 2.3.0. The issue is a Missing/Broken Authorization (Broken Access Control) vulnerability allowing unauthenticated access to perform actions that should be restricted. Affected product: WP Dummy Content Generator ...

CVE-2023-37394 WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0...