Apple macOS Bug Reveals Cache of Sensitive Data from Encrypted Drives

Security researchers are warning of almost a decade old issue with one of the Apple's macOS feature which was designed for users' convenience but is potentially exposing the contents of files stored on password-protected encrypted drives. Earlier this month, security researcher Wojciech Regula fr...

CVE-2018-12534

A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...

Sql injection

A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...

CVE-2018-12534

A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...

CVE-2018-12534

A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...

CVE-2018-12534

The CVE-2018-12534 entry describes a SQL injection vulnerability in the WordPress Quick Chat plugin, affecting versions prior to 4.00. Multiple sources (NVD/NVD-affiliates, CNVD) confirm an SQL injection that could allow a remote attacker to execute arbitrary SQL commands, with impact to confiden...

CVE-2018-12534: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress...

PT-2018-11240

Name of the Vulnerable Software and Affected Versions Quick Chat plugin versions prior to 4.00 Description A SQL injection issue was discovered in the Quick Chat plugin for WordPress. Recommendations For versions prior to 4.00, update to version 4.00 or later to resolve the issue...

Action required for IBM MQ on AWS Quick Start for security vulnerabilities in Ubuntu.

Abstract Ubuntu is shipped as a component of IBM MQ in AWS Quick Start. Information about a security vulnerability affecting Ubuntu has been published in a security bulletin. Content Please consult Ubuntu's security bulletin Information Leak via speculative execution side channel attacks...

WordPress WooCommerce Quick Reports plugin <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by ThreatPress Security Research Team in WordPress WooCommerce Quick Reports plugin versions = 1.0.7. Solution 11 June 2018 - we were unable to find an updated version or its changelog...

WordPress MULTIDOTS WooCommerce Quick Reports Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. MULTIDOTS WooCommerce Quick Reports plugin is used in one of the e-commerce order report generation plugin...

WordPress WooCommerce Quick Reports plugin <= 1.0.6 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by ThreatPress Research Team in WordPress WooCommerce Quick Reports plugin versions = 1.0.6. Solution 3 June 2018 - plugin still closed by WordPress Security team, no patched version available...

CVE-2018-11485

The MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to Stored XSS. It allows an attacker to inject malicious JavaScript code on the WooCommerce - Orders admin page. The attack is possible by modifying the "referralsite" cookie to have an XSS payload, and...

CVE-2018-11485

The MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to Stored XSS. It allows an attacker to inject malicious JavaScript code on the WooCommerce - Orders admin page. The attack is possible by modifying the "referralsite" cookie to have an XSS payload, and...

CVE-2018-11485

The CVE-2018-11485 entry concerns the WordPress plugin MULTIDOTS WooCommerce Quick Reports (versions

CVE-2018-11485: Improper Neutralization of Input During Web Page Generation

The MULTIDOTS WooCommerce Quick Reports plugin 1.0.6 and earlier for WordPress is vulnerable to Stored XSS. It allows an attacker to inject malicious JavaScript code on the WooCommerce - Orders admin page. The attack is possible by modifying the "referralsite" cookie to have an XSS payload, and...

PT-2018-10602

Name of the Vulnerable Software and Affected Versions MULTIDOTS WooCommerce Quick Reports plugin versions 1.0.6 and earlier Description The issue allows an attacker to inject malicious JavaScript code on the WooCommerce - Orders admin page through a Stored XSS attack. This is possible by modifyin...

CVE-2018-11562

CVE-2018-11562 affects MISP 2.4.91 via a vulnerability in the template file app/View/Elements/eventattribute.ctp that allows reflected XSS when a user clicks a malicious link in an event view and then uses the deleted attributes quick filter. Root cause: improper handling in that view leading to ...

CVE-2018-11562: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter...

PT-2018-10670

Name of the Vulnerable Software and Affected Versions MISP version 2.4.91 Description A reflected XSS issue was discovered, allowing exploitation if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter. This occurs due to a vulnerability in th...