266 matches found
CVE-2025-58832
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Search by Google search-google allows Stored XSS.This issue affects Search by Google: from n/a through = 1.9...
CVE-2025-58832
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Search by Google search-google allows Stored XSS.This issue affects Search by Google: from n/a through = 1.9...
Data Brokers Face New Pressure for Hiding Opt-Out Pages From Google
After reporters found dozens of firms hiding privacy tools from search results, US senator Maggie Hassan insists the companies explain their practices—and pledge to improve access to privacy controls...
Data Brokers Are Hiding Their Opt-Out Pages From Google Search
Dozens of companies are hiding how you can delete your personal data, The Markup and CalMatters found...
Hacklink Market Linked to SEO Poisoning Attacks in Google Results
Cybersecurity researchers at Netcraft have discovered a series of new SEO poisoning related attacks exploiting Google’s search results…...
CVE-2011-1339
Cross-site scripting XSS vulnerability in Google Search Appliance before 5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-6919
Cross-site scripting XSS vulnerability in the googleSearch CSE comgooglesearchcse component 3.0.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the q parameter to index.php...
PayPal’s “no-code checkout” abused by scammers
We recently identified a new scam targeting PayPal customers with very convincing ads and pages. Crooks are abusing both Google and PayPal's infrastructure in order to trick victims calling for assistance to speak with fraudsters instead. Combining official-looking Google search ads with...
CVE-2025-23698
Cross-Site Request Forgery CSRF vulnerability in ivanra10 WP Custom Google Search wp-custom-google-search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through = 1.0...
CVE-2025-23698
Cross-Site Request Forgery CSRF vulnerability in ivanra10 WP Custom Google Search wp-custom-google-search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through = 1.0...
CVE-2025-23698 WordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ivanra10 WP Custom Google Search wp-custom-google-search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through = 1.0...
CVE-2025-23698
CVE-2025-23698 describes a CSRF weakness in the WordPress plugin “WP Custom Google Search” that enables stored XSS. Public details confirm the vulnerability affects WP Custom Google Search versions up to 1.0 (no exact fixed version provided in the sources). The issue stems from cross-site request...
WordPress WP Custom Google Search plugin <= 1.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP Custom Google Search versions = 1.0...
PT-2025-5033 · WordPress · Wp Custom Google Search
Name of the Vulnerable Software and Affected Versions: WP Custom Google Search versions n/a through 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application...
WordPress plugin WP Custom Google Search 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Malicious ad distributes SocGholish malware to Kaiser Permanente employees
On December 15, we detected a malicious campaign targeting Kaiser Permanente employees via Google Search Ads. The fraudulent ad masquerades as the health care company's HR portal used to check for benefits, download paystubs and other corporate related tasks. We believe the threat actors' intent...
SUSE-RU-2024:3971-1 Recommended update for mojo-parent
This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets bsc1201684 - Changes and Bugs fixed: Java 8 is now the minimum requirement...
Fake Disney+ activation page redirects to pornographic scam
A common way to activate digital subscriptions such as Netflix, Prime or Disney+ on a new TV is to visit a website and enter the code seen on your screen. It's much easier than having to authenticate using a remote and typing a username and password. Scammers are creating fake activation pages th...
Dozens of Google products targeted by scammers via malicious search ads
In a previous blog, we saw criminals distribute malware via malicious ads for Google Authenticator. This time, brazen malvertisers went as far as impersonating Googles entire product line and redirecting victims to a fake Google home page. Clearly not afraid of poking the bear, they even used and...
