148 matches found
Malicious code in vue2-amis-custom-widget-kk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de21054a3b5e13b8447bf6f0be9f2fe496ccdc7a29fd73162292d1373ed8437f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1311 Malicious code in vue2-amis-custom-widget-kk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de21054a3b5e13b8447bf6f0be9f2fe496ccdc7a29fd73162292d1373ed8437f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
kk-tanaka.com Cross Site Scripting vulnerability OBB-3911458
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kk-group.ru Cross Site Scripting vulnerability OBB-3906047
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-4642
The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition...
CVE-2023-4642
Summary of CVE-2023-4642 (kk Star Ratings WordPress plugin) : The vulnerability affects the kk Star Ratings WordPress plugin versions prior to 5.4.6. The root cause is a race condition stemming from the plugin not implementing atomic operations, which can allow a single user to submit multiple vo...
PT-2023-30018 · WordPress · Kk Star Ratings
Name of the Vulnerable Software and Affected Versions: kk Star Ratings WordPress plugin versions prior to 5.4.6 Description: The issue allows a user to vote multiple times on a poll due to a Race Condition, as the plugin does not implement atomic operations. Recommendations: For versions prior to...
CVE-2023-4642: Concurrent Execution using Shared Resource with Improper Synchronization
The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition...
WordPress plugin kk Star Ratings security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...
kk Star Ratings < 5.4.6 - Missing Authorization
Description The kk Star Ratings plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on an unknown function in versions up to, and including, 5.4.5. This makes it possible for unauthenticated attackers to make use of this functionality. The exa...
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Description The plugin does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. PoC 1- Install and activate kk Star Ratings. 2- Go to the page that displays the star rating. 3- Using Burp and the Turbo Intruder extension, intercept the rating...
WordPress kk Star Ratings Plugin <= 5.4.5 is vulnerable to Broken Access Control
Software kk Star Ratings Type Plugin Vulnerable versions = 5.4.5 Fixed in 5.4.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46639 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f81ae2f458b9 Credits Revan Arifio Required privile...
WordPress kk Star Ratings Plugin < 5.4.5 is vulnerable to Cross Site Scripting (XSS)
Software kk Star Ratings Type Plugin Vulnerable versions 5.4.5 Fixed in 5.4.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a02b4b22ea39 Credits Rafie Muhammad Patchstack Required...
WordPress kk Star Ratings Plugin <= 5.4.3 is vulnerable to Broken Access Control
Software kk Star Ratings Type Plugin Vulnerable versions = 5.4.3 Fixed in 5.4.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36528 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ef1dd884760d Credits Mika Required privilege...
tajima-kk.co.jp Cross Site Scripting vulnerability OBB-3390316
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kk-nbc.jp Cross Site Scripting vulnerability OBB-2813607
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
new packages: hunspell-kk
An update is available for hunspell-kk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
WordPress kk Star Ratings plugin < 5.2.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...
WordPress kk Star Ratings plugin < 5.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...