785 matches found
CVE-2024-7313
CVE-2024-7313 relates to the Shield Security WordPress plugin (versions before 20.0.6). The connected documents confirm a reflected XSS vulnerability in the admin dashboard where the plugin fails to sanitize/escape the nav_sub parameter, allowing an authenticated attacker (e.g., an administrator)...
WordPress Shield Security Plugin < 20.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Shield Security Type Plugin Vulnerable versions 20.0.6 Fixed in 20.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7313 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID df05c396b592 Credits Krugov Artyom...
WordPress plugin Shield Security 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2024-38259 · WordPress · The Shield Security Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The Shield Security WordPress plugin versions prior to 20.0.6 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This...
Exploit for Cross-site Scripting in Getshieldsecurity Shield_Security
Shield Security Plugin Vulnerability Exploit CVE-2024-7313...
WordPress Shield Security 20.0.5 Cross Site Scripting
Exploit Title: CVE-2024-7313 - Reflected XSS to Unauthorised Administrator Account Creation Google Dork: inurl:"/wp-content/plugins/wp-simple-firewall/" Cannot find version numbers from this DORK Date: 16/08/2024 Exploit Author: Tim Lepp Vendor Homepage: https://getshieldsecurity.com/ Software...
SUSE CVE-2024-26770
In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Add missing null pointer checks to LED initialization devmkasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointe...
Friday Squid Blogging: Treating Squid Parasites
A newly discovered parasite that attacks squid eggs has been treated. Blog moderation policy...
Adaptive Shield Showcases New ITDR Platform for SaaS at Black Hat USA
Amid rising breaches including Snowflake, the platform helps security teams proactively detect and respond to identity-centric threats in business-critical SaaS applications...
1inch partners with Blockaid to enhance Web3 security through the 1inch Shield
Dubai, UAE, 20th June 2024, CyberNewsWire...
WordPress Shield Security plugin <= 19.1.10 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Christian Angel in WordPress Plugin Shield Security versions = 19.1.10...
WordPress Shield Security Plugin <= 19.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
Software Shield Security Type Plugin Vulnerable versions = 19.1.10 Fixed in 19.1.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4344 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cbf7668e1a87 Credits Christian Angel...
CVE-2024-4344
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for...
CVE-2024-4344 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for...
CVE-2024-4344 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery
The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for...
Shield Security – Smart Bot Blocking & Intrusion Prevention Security < 19.1.11 - Cross-Site Request Forgery
Description The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible fo...
Protect and Elevate Your DNS with Akamai Shield NS53
Learn how Akamai Shield NS53 can protect your capital investment into on-premises DNS infrastructure and significantly improve performance...
Information leakage vulnerability in Tianrui Green Shield Approval System of Xiamen Tianrui Technology Co. Ltd (CNVD-2024-25622)
Xiamen Tianrui Technology Co., Ltd. is a provider of data security products and services. An information leakage vulnerability exists in the Tianrui Green Shield Approval System of Xiamen Tianrui Technology Company Limited, which can be exploited by attackers to obtain sensitive information...
How to track and stop CVE-2024-3400: Palo Alto Networks API Exploit Causing Critical Infrastructure and Enterprise Epidemics
On Friday April 12, Palo Alto disclosed that some versions of PAN-OS are not only vulnerable to remote code execution, but that the vulnerability has been actively exploited to install backdoors on Palo Alto firewalls. A patch is expected to be available on April 14th. The advisory from Palo Alto...