CVE-2024-54386 WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in pushmonkey Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart push-monkey-desktop-push-notifications allows Cross Site Request Forgery.This issue affects Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart:...

CVE-2024-55629

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 18:13:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113782763860609034 2025-01-06 18:16:05+00:00| seen|...

CVE-2024-55626

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 17:51:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113782677525284582 2025-01-06 18:15:57+00:00| seen|...

PT-2024-36272 · Unknown · Push Monkey Pro – Web Push Notifications +1

Name of the Vulnerable Software and Affected Versions: Push Monkey Pro – Web Push Notifications and WooCommerce Abandoned Cart versions n/a through 3.9 Description: The issue is a Cross-Site Request Forgery CSRF problem, which allows for Cross Site Request Forgery. This means an attacker can tric...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

Apple iOS和PadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS and iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPad...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-54485

CVE-2024-54485 affects Apple iOS/iPadOS where a user’s lock-screen notifications could be viewed by an attacker with physical access. The issue is mitigated by updates: iPadOS 17.7.3, iOS 18.2, and iPadOS 18.2 fix the flaw by adding additional logic to prevent lock-screen notification content exp...

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen...

CVE-2024-12550

creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1678/ 2025-02-11 20:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a 2025-02-20 23:26:55+00:00| seen|...

PT-2024-36352 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue allows an attacker with physical access to an iOS device to view notification content from the lock screen. This is possible due t...

CVE-2024-11436 Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...

CVE-2024-11436

CVE-2024-11436 involves the WordPress plugin Drag & Drop Builder (and related components) with a Reflected Cross-Site Scripting vulnerability via the page parameter in versions

CVE-2024-11796

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1622/ 2024-11-28 00:12:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557685605490012 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11794

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1620/ 2024-11-27 23:57:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626594293010 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-51653

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653 WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653 WordPress UPDATE NOTIFICATIONS plugin <= 0.3.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in akira1891 UPDATE NOTIFICATIONS update-notifications allows Stored XSS.This issue affects UPDATE NOTIFICATIONS: from n/a through = 0.3.4...

CVE-2024-51653

CVE-2024-51653 documents a CSRF to Stored XSS vulnerability in the WordPress plugin UPDATE NOTIFICATIONS affecting versions

PT-2024-34797 · Unknown · Mario Spinaci Update Notifications

Name of the Vulnerable Software and Affected Versions: Mario Spinaci UPDATE NOTIFICATIONS versions 0.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the...