Knight Lab Timeline < 3.9.3.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Description The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

QakBot Resurges Latest Strikes with Ransom Knight and Remcos RAT

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The QakBot malware has been associated with a persistent phishing campaign since the beginning of August 2023, leading to the deployment of both the Ransom Knight ransomware and the Remcos RAT. To receiv...

QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

Despite the disruption to its infrastructure, the threat actors behind the QakBot malware have been linked to an ongoing phishing campaign since early August 2023 that led to the delivery of Ransom Knight aka Cyclops ransomware and Remcos RAT. This indicates that "the law enforcement operation ma...

Qakbot-affiliated actors distribute Ransom Knight malware despite infrastructure takedown

The threat actors behind the Qakbot malware have been conducting a campaign since early August 2023 in which they have been distributing Ransom Knight ransomware and the Remcos backdoor via phishing emails. Notably, this activity appeared to begin before the FBI seized Qakbot infrastructure in la...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co. Ltd (CNVD-2021-19735)

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS command execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

Knight CMS suffers from SQL injection vulnerability (CNVD-2021-09683)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Arbitrary Command Execution Vulnerability in Knight Talent System Basic Edition

Knight Talent System is a free + open source professional recruitment system based on PHP + MYSQL as the core development. Knight Talent System Basic Edition has an arbitrary command execution vulnerability. Attackers can use this vulnerability to obtain server privileges...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co.

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

74CMS PHP Remote File Inclusion Vulnerability

Knight CMS 74cms is a free website management system based on PHP+MYSQL, providing perfect talent recruitment website construction program. There is a PHP remote file inclusion vulnerability in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in versions prior ...

File Inclusion Vulnerability in Knight CMS Frontend

Knight Talent System is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. A file inclusion vulnerability exists in the frontend of Knight CMS, which can be exploited by attackers to cause the inclusion of files to execute arbitrary code...

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2020-15092: Improper Neutralization of Input During Web Page Generation

In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheets or in a JSON configuration file. Mos...

WordPress Knight Lab Timeline plugin <= 3.6.3.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability vulnerable TimelineJS library version discovered in WordPress Knight Lab Timeline plugin versions = 3.6.3.0. Solution Update the WordPress Knight Lab Timeline plugin to the latest available version at least 3.7.0.0...

Arbitrary File Deletion Vulnerability in Knight Talent System

Knight Talent System is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight Talent System has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

Knight CMS has a flawed logic vulnerability

Knight CMS is a PHP-based open source professional talent system. Knight CMS has a logic flaw vulnerability that can be exploited by attackers to reset any user's password...

Stored XSS Vulnerability in Knight CMS

Knight CMS is a PHP-based open source professional talent system. Knight CMS has a stored XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...

74cms 4.2.26 SQL Injection Vulnerability in Frontend Aj***.php Page

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Aj.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...