Mass Email To users < 1.1.5 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)

Software Mass Email To users Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47600 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1924a47fba47 Credits minhtuanact...

LinkedIn: HTTP Request Smuggling (CL.0) leads to mass redirect users to attacker server without user interaction

Vulnerability description not provided...

WordPress Mass Delete Unused Tags Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Mass Delete Unused Tags Type Plugin Vulnerable versions = 2.0.0 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27430 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 6d6176635537 Credits Mika Requir...

WordPress Mass Delete Taxonomies Plugin <= 3.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Mass Delete Taxonomies Type Plugin Vulnerable versions = 3.0.0 Fixed in 4.0.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 69e07302ea8d Credits WordFence Required...

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...

Malicious code in tppippushvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1cf31dc55405bcae61528f7f58f56500fa6aea81aa243c8b62bb71135e5f276 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-pushpullsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa1f5d51a31bac2a1b067e2ae506a835ba492455ddb68425c0c9221f6c60e1b8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tphackeded (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2902f09916106dd4bab856715ec14bc89c9511cf25c8b32c302ee6a0be33959f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfpyping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a34872f7720643f9e65da56bd266e8a0e0fc281426efbd4db9236d36a296f670 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqstringpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b0821a004262c92cf228b4d52a408acc7d3215a8758d95b5e818360462c908b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqrandominfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9a6685808f2c046c5baecdece592eda602ca8a35bb5b64599b684c917e02d5ea EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libgamehacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 18d65d7225a4e6c29ef448d979fa633e56d238394de831ddc8b4a6208bec024a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in paypalpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx db13f12b3af58eb3d0fb9477e73851a73ea8ee4a0f1b2790f5c9d91f0c07c4d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in pepsuper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d0c26e51fe4559d6310246c80facacc1ea544fa99c11930b4556a2bcbe8bf7e3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

Malicious code in dicsord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2008b73c9ded7f126f53db3db8a339bc33ddca207a5728e11ed5b5bf3349c73c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discrd-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a01a8e0beaa017a4d2c5e5527e2824d721ae88b0cd03fe6826ba1603546ff447 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in teensorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0a2ff806f353099e45e280a9b7aaafd122299635b37541ddd0b931719467693f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in matplotlb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a5230460f70d1de9cde080dfedaa2ca545ffd9e5179d0e7bc8ae0053481a3900 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...