CVE-2023-32103

CVE-2023-32103 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Theme Palace TP Education up to version 4.4 . The issue arises from an XSS flaw in the plugin’s handling of user-generated content, with patches available in version 4.5 . Public references in Patch...

CVE-2023-32103 WordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

PT-2023-23613 · Theme Palace · Wp Education

Name of the Vulnerable Software and Affected Versions: Theme Palace TP Education plugin versions prior to 4.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be...

WordPress Cuisine Palace Theme <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Cuisine Palace Type Theme Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 37c5a3d00c1a Credits Rafie Muhammad Patchstack Required...

yavorpalace.com Cross Site Scripting vulnerability OBB-3479907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-285 Malicious code in dow-load-twisted-palace-the-royals-3-by-erin-watt-on-kindle-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992916e30ffe316f71ab67ab891183b2e852e6e9a04300baf44278b106f7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

koreanpalace.biz Cross Site Scripting vulnerability OBB-3096141

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

petitpalace.pe Cross Site Scripting vulnerability OBB-2961808

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Cuisine Palace theme <= 1.1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Cuisine Palace theme versions = 1.1.1. Solution No patched version available...

WordPress Cuisine Palace theme <= 1.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Cuisine Palace theme versions = 1.1.1. Solution No patched version available...

seafoampalace.org Cross Site Scripting vulnerability OBB-2383994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

A week in security (August 13 – August 19)

Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...

booking.florencehotelpittipalacealpontevecchio.com XSS vulnerability

Open Bug Bounty ID: OBB-594312 Description| Value ---|--- Affected Website:| booking.florencehotelpittipalacealpontevecchio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

treebo.com XSS vulnerability

Open Bug Bounty ID: OBB-452768 Description| Value ---|--- Affected Website:| treebo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ZeroNights 2017: back to the cyber 80s

Last Friday, 17th of November, I attended the ZeroNights 2017 conference in Moscow. And it was pretty awesome. Thanks to the organizers! Here I would like to share some of my impressions. First of all, I want to say that two main Moscow events for information security practitioners, PHDays and...

prestonpalace.nl XSS vulnerability

Vulnerable URL: https://www.prestonpalace.nl/search/All/"?zoekresultaat=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 847854 VIP website status:| No Check prestonpalace.nl SSL...

Princess Palace Salon Makeover - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Princess Palace Salon Makeover published at the 'play' market has multiple vulnerabilities...

Skat-Palace - Dangerous filesystem permissions, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Skat-Palace published at the 'play' market has multiple vulnerabilities...

Singapore police arrested six men for allegedly hacking Prime Minister and President websites

A Singaporean hacker calling himself the "The Messiah" was arrested in Kuala Lumpur last Monday for hacking into a Singaporean government website over two weeks ago - from a Kuala Lumpur apartment. James Raj 35 charged with hacking of Ang Mo Kio town council website and posting a symbol associate...

DefCamp 2013 - International Hacking and Information Security Conference in Romania

The Fourth Edition of an International Information Security Conference hosted in Romania , The DefCamp 2013 is now open for Call for Papers. Over 300 Security experts, Researchers, and Enthusiasts from Romania and neighboring countries are expected to take part in the event in Bucharest, at the...