CVE-2023-46084: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons Font Loader: from n/a through 1.1.2...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

CVE-2023-32121 WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

CVE-2023-32121

CVE-2023-32121 concerns the WordPress plugin Zero Spam for WordPress by Highfivery. The vulnerability is described as an improper neutralization of SQL elements leading to SQL Injection and affects the plugin when installed at versions up to and including 5.4.4. The CVSS metrics indicate a high i...

CVE-2023-32121 WordPress Zero Spam for WordPress plugin <= 5.4.4 - SQL Injection vulnerability

A vulnerability in Ben Marshall Zero Spam zero-spam.This issue affects Zero Spam: from n/a through = 5.4.4...

PT-2023-9721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's LLC Logical Link Control component, which reads the mac header with eth hdr without verifying that the skb has an Ethernet header. This can be...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms fluentform allows SQL Injection.This issue affects Contact Form Plugin –...

CVE-2023-24410

CVE-2023-24410: WordPress plugin FluentForm (Contact Form Plugin – Fastest Contact Form Builder)

auroraborealis.llc Cross Site Scripting vulnerability OBB-3571882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Joomla iProperty Real Estate 4.1.1 - Reflected XSS

Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Date: 29/07/2023 Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo:...

Joomla iProperty Real Estate 4.1.1 Cross Site Scripting

Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Date: 29/07/2023 Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo:...

Joomla iProperty Real Estate 4.1.1 - Reflected XSS Vulnerability

Exploit Title: Joomla iProperty Real Estate 4.1.1 - Reflected XSS Exploit Author: CraCkEr Vendor: The Thinkery LLC Vendor Homepage: http://thethinkery.net Software Link: https://extensions.joomla.org/extension/vertical-markets/real-estate/iproperty/ Demo: https://iproperty.thethinkery.net/ Versio...

WordPress User Menus – Nav Menu Visibility Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software User Menus – Nav Menu Visibility Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Code Atlantic LLC PSID 1af27071833c Credits Rafie Muhamma...

Who’s Behind the DomainNetworks Snail Mail Scam?

If youve ever owned a domain name, the chances are good that at some point youve received a snail mail letter which appears to be a bill for a domain or website-related services. In reality, these misleading missives try to trick people into paying for useless services they never ordered, dont...

WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)

Software OOPSpam Anti-Spam Type Plugin Vulnerable versions = 1.1.44 Fixed in 1.1.45 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-35913 Patch priority Low CVSS severity Low 4.3 Developer OOPSpam LLC PSID 2dfc3bd6e459 Credits Skalucy Required...

Microsoft sued for alleged misuse of stolen Dark Web credentials

By Waqas Hold Security LLC, a cybersecurity company, has sued Microsoft for misusing over 360 million compromised credentials collected from the Dark Web. This is a post from HackRead.com Read the original post: Microsoft sued for alleged misuse of stolen Dark Web credentials...

CVE-2022-47136

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...

CVE-2022-47136

CVE-2022-47136 is a Cross-Site Request Forgery (CSRF) vulnerability in Ninja Tables for WordPress (WPManageNinja Ninja Tables) affecting versions up to 4.3.4. The issue is due to CSRF, with patch available in version 4.3.5. Exploitation status is not reported in the provided documents. Remediate ...

CVE-2022-47136 WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...

CVE-2022-47136: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPManageNinja LLC Ninja Tables – Best Data Table Plugin for WordPress plugin = 4.3.4 versions...