WordPress All-in-One WP Migration plugin <= 7.62 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Team ISH Tecnologia in WordPress All-in-One WP Migration plugin versions = 7.62. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.63...

Security Vulnerabilities fixed in Firefox ESR 91.13 — Mozilla

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. A cross-origin iframe referencing an XSLT documen...

powerdns-recursor -- denial of service

PowerDNS Team reports: PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation...

CVE-2022-2557

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

CVE-2022-2557 WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

PT-2022-17373 · WordPress · Team Wordpress

Name of the Vulnerable Software and Affected Versions: The Team WordPress plugin versions prior to 4.1.2 Description: The issue allows any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is...

WordPress plugin Team 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2022-2557: Improper Limitation of a Pathname to a Restricted Directory

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

dnsReaper - Subdomain Takeover Tool For Attackers, Bug Bounty Hunters And The Blue Team!

DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire DNS estate i...

DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers. The improvements also include a new infection chain that incorporates previousl...

Malicious Package

Overview lusha-ui-components-v2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview dobix is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

Malicious Package

Overview opensea-wyvern is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

The CVE CVE-2022-29507 affects the Intel® Team Blue mobile application (all versions). The root cause is insufficient protection of credentials, potentially allowing an authenticated user to disclose information via local access. The issue is documented with a low CVSS base score (3.3/Low) and in...

PT-2022-19665

Name of the Vulnerable Software and Affected Versions IntelR Team Blue mobile application affected versions not specified Description The issue concerns insufficiently protected credentials in the IntelR Team Blue mobile application, which may allow an authenticated user to potentially enable...

CVE-2022-29507: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...