The Real Story of “The Order”

The new film about an FBI agent chasing a white supremacist terror cell is based on a true story—and one that connects the headlines of 40 years ago to those of today...

CVE-2024-49663

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Elena Zhyvohliad uCAT – Next Story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through 2.0.0...

CVE-2024-49663

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

CVE-2024-49663 WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

CVE-2024-49663 WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

CVE-2024-49663

CVE-2024-49663 affects the WordPress plugin uCAT – Next Story (versions ≤ 2.0.0). The description documents an improper neutralization of input during web page generation leading to a reflected XSS vulnerability. Exploitation is possible without authentication (per PatchStack entry), via crafting...

CVE-2024-49663: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...

PT-2024-33615 · Unknown · Ucat – Next Story

Name of the Vulnerable Software and Affected Versions: uCAT – Next Story versions n/a through 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin uCAT – Next Story versions = 2.0.0...

WordPress uCAT – Next Story Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software uCAT – Next Story Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b51e5248ad22 Credits Mika Required privilege...

Malware in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3471 Malicious code in story-mcp-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e663c654e00b0eb9bdfecb5446b4c56d8f8799ef600619c3f0577bd30863476b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in story-mcp-hub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e663c654e00b0eb9bdfecb5446b4c56d8f8799ef600619c3f0577bd30863476b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cameo-react-native-share-story (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1858 Malicious code in cameo-react-native-share-story (npm)

--- -= Per source details. Do not edit below this line.=-...

Friday Squid Blogging: The Awfulness of Squid Fishing Boats

Its a pretty awful story. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

CVE-2024-30557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aesopinteractive Aesop Story Engine allows Stored XSS.This issue affects Aesop Story Engine: from n/a through 2.3.2...

CVE-2024-30557 WordPress Aesop Story Engine plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aesopinteractive Aesop Story Engine allows Stored XSS.This issue affects Aesop Story Engine: from n/a through 2.3.2...

CVE-2024-30557

The connected record for CVE-2024-30557 indicates a stored cross-site scripting flaw in Aesop Story Engine for WordPress, up to version 2.3.2. Root cause: improper neutralization of input during web page generation. Access requires authentication (Contributor+). Impact per docs: stored XSS, with ...

CVE-2024-30557 WordPress Aesop Story Engine plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aesopinteractive Aesop Story Engine allows Stored XSS.This issue affects Aesop Story Engine: from n/a through 2.3.2...