49 matches found
seeker
Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...
seeker
可用语言 Seeker 背后的概念很简单，就像我们托管钓鱼页面来获取凭证一样，为什么不托管一个虚假页面，请求您的位置权限，就像许多流行的基于位置的网站那样。更多内容请阅读 thewhiteh4t 的博客 。Seeker 托管一个虚假网站，该网站请求位置权限，如果目标允许，我们可以获取： 经度 纬度 精确度 海拔 - 并非总是可用 方向 - 仅在用户移动时可用 速度 - 仅在用户移动时可用 除了位置信息，我们还可以在无需任何权限的情况下获取 设备信息 ： 使用 Canvas 指纹识别的唯一 ID 设备型号 - 并非总是可用 操作系统 平台 CPU 核心数量 - 近似结果 内存大小 - 近似...
CVE-2026-15677 code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to t...
WordPress DukaPress plugin <= 3.2.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Vuln Seeker Cyber Security Team in WordPress Plugin DukaPress versions = 3.2.4...
EUVD-2024-16025
Malicious code in bioql PyPI...
EUVD-2024-51334
Malicious code in bioql PyPI...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
A week in security (February 3 – February 9)
Last week on Malwarebytes Labs: WhatsApp says Paragon is spying on specific users New AI "agents" could hold people for ransom in 2025 Valley News Live exposed more than a million job seeker’s resumes Small business owners, secure your web shop University site cloned to evade ad detection...
Valley News Live exposed more than a million job seeker’s resumes
Making your own bad news is not what Valley News Live had in mind, but negligence comes at a price. Cybernews researchers found an unprotected AWS S3 bucket that belongs to Take Valley News Live, a North Dakota-based television station. Gray Television, the owner of Valley News Live, makes for th...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093 code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093
CVE-2024-13093 affects code-projects Job Recruitment 1.0, with a SQL injection in the Seeker Profile Handler. The vulnerability is in the file /_parse/_call_main_search_ajax.php, caused by manipulation of the parameter s1. The attack can be launched remotely and, per the provided descriptions, th...
CVE-2024-13093: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
WordPress 3DPrint Lite plugin < 2.1 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin 3DPrint Lite versions 2.1...
WordPress pz-frontend-manager Plugin < 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software pz-frontend-manager Type Plugin Vulnerable versions 1.0.6 Fixed in 1.0.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6244 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 00622e75c008 Credits Vuln Seeker...
WordPress Light Poll plugin <= 1.0.0 - Poll Answers Deletion via CSRF vulnerability
Poll Answers Deletion via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Light Poll versions = 1.0.0...
CVE-2024-0226
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
