Rhysida Ransomware

Rhysida Ransomware By Alexandre Mundo, Max Kersten, and Leandro Velasco · October 9, 2023 New ransomware victims are made every day by ransom gangs with a variety of ransomware malware families, one of which is the Rhysida ransomware family. Within this blog, an anonymised version of an attack by...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux SIG Cloud 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2023-44474

Unauth. Reflected Cross-Site Scripting XSS vulnerability in MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin = 2.0.0 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin = 2.0.0 versions...

CVE-2023-44474

CVE-2023-44474 concerns the Tiger Forms – Drag and Drop Form Builder WordPress plugin. The vulnerability is an unauthenticated, reflected Cross-Site Scripting (XSS) flaw affecting versions ≤ 2.0.0. Root cause details are not explicitly provided beyond the XSS classification, but public sources co...

PT-2023-29253 · WordPress · Md Jakir Hosen Tiger Forms – Drag/Drop Form Builder

Name of the Vulnerable Software and Affected Versions: MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin versions prior to 2.0.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...

CVE-2023-44474: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin = 2.0.0 versions...

RLSA-2023:5244 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: out-of-bounds write caused by unclear skb-cb CVE-2023-3090 kernel: UAF in nftables when nftsetlookupglobal triggered after handling named and anonymous sets in batch requests...

CVE-2023-41423

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function...

WordPress plugin Githuber MD cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2023-41423

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function...

CVE-2023-41423

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function...

CVE-2023-41423

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function...

PT-2023-27943

Name of the Vulnerable Software and Affected Versions WP Githuber MD plugin version 1.16.2 Description The issue allows a remote attacker to execute arbitrary code via a crafted payload to the new article function. This is a Cross Site Scripting vulnerability. Recommendations For WP Githuber MD...

CVE-2023-41423: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in WP Githuber MD plugin v.1.16.2 allows a remote attacker to execute arbitrary code via a crafted payload to the new article function...

CVE-2023-41423

CVE-2023-41423 affects the WP Githuber MD WordPress plugin, version 1.16.2. A Cross Site Scripting (XSS) flaw exists in the new article functionality that can be triggered by a crafted payload, enabling a remote attacker to execute arbitrary code. The vulnerability is documented across multiple f...

sanjaykhediamd.com Cross Site Scripting vulnerability OBB-3655377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-36802

Уязвимость функции mddev unlock модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с повторным освобождением ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...

PT-2025-41109

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc2-00121-g01e55c376936 562 Description The Linux kernel contained a flaw in the md multiple device subsystem where a use-after-free condition could occur. Specifically, the code would attempt to dereferenc...

phoenixlasermd.com Cross Site Scripting vulnerability OBB-3651391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...