1848 matches found
Malicious code in me-dheeraj-moye-moye (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92a9a2d167594b96c62e975655c136b63e63dcf5c45497938b6331f4fb6b9bc7 --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, researc...
MAL-2024-5357 Malicious code in me-dheeraj-moye-moye (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92a9a2d167594b96c62e975655c136b63e63dcf5c45497938b6331f4fb6b9bc7 --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, researc...
Malicious code in analyze-me (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @hotwire/react-me (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2935 Malicious code in @hotwire/react-me (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-3966
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin...
CVE-2024-3965
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-3966
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin...
CVE-2024-3965
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-3965 Pray For Me <= 1.0.4 - Settings Update via CSRF
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-3966
CVE-2024-3966 affects the Pray For Me WordPress plugin up to version 1.0.4. The vulnerability arises from insufficient sanitisation/escaping of certain parameters, enabling unauthenticated visitors to trigger a Cross-Site Scripting (XSS) payload when an admin visits the Prayer Requests area in th...
CVE-2024-3966 Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin...
CVE-2024-3966 Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin...
CVE-2024-3965 Pray For Me <= 1.0.4 - Settings Update via CSRF
The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2024-3965
CVE-2024-3965 affects the Pray For Me WordPress plugin (<= 1.0.4). Public details confirm the issue is a CSRF gap when updating plugin settings, which could allow a logged-in admin to change settings via a CSRF attack. The CVE entry notes no public exploit details beyond this description, and ...
WordPress plugin Pray For Me security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-28587 · WordPress · Pray For Me
Name of the Vulnerable Software and Affected Versions: Pray For Me WordPress plugin versions 1.0.0 through 1.0.4 Description: The issue concerns the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: F...
WordPress plugin Pray For Me security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-28598 · WordPress · Pray For Me
Name of the Vulnerable Software and Affected Versions: Pray For Me WordPress plugin versions 1.0.0 through 1.0.4 Description: The issue allows unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin. This is due to the...