WordPress Locations and Areas – Leaflet Map with Region Tabs plugin <= 1.7.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Locations and Areas – Leaflet Map with Region Tabs plugin versions = 1.7.0. Solution Update the WordPress Locations and Areas – Leaflet Map with Region Tabs plugin to the latest available version at...

WordPress Locations and Areas – Leaflet Map with Region Tabs plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Locations and Areas – Leaflet Map with Region Tabs plugin versions = 1.7.0. Solution Update the WordPress Locations and Areas – Leaflet Map with Region Tabs plugin to the latest available version at least 1.7.1...

WordPress Tabs with Recommended Posts (Widget) plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Tabs with Recommended Posts Widget plugin versions = 1.0.0. Solution No patched version available...

WordPress Tabs with Recommended Posts (Widget) plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Tabs with Recommended Posts Widget plugin versions = 1.0.0. Solution No patched version available...

CVE-2021-46557

Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...

CVE-2021-46557

Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...

CVE-2021-46557

Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...

Cross site scripting

Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...

CVE-2021-46557

CVE-2021-46557 affects Vicidial 2.14-783a and describes a cross-site scripting (XSS) vulnerability triggered via the input tabs. The available connected documents confirm the vulnerability type (XSS) and the affected version, but do not provide additional exploit details, impact metrics, or a pub...

CVE-2021-46557

Vicidial 2.14-783a was discovered to contain a cross-site scripting XSS vulnerability via the input tabs...

CVE-2022-0148

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page...

Apple fixes Mac bug that could have allowed takeover of webcams and browser tabs

A researcher has picked up a $100,500 bounty from Apple after discovering a rather nasty method of gaining control of other people’s Macs. The issue, discovered lurking in Safari by Ryan Pickren, could make use of rogue websites to perform a number of dubious actions. It begins, as so many attack...

CVE-2021-24831

All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete arbitrary tabs...

WordPress Tabs plugin <= 3.5.4 - Unauthenticated Arbitrary Option Update

Unauthenticated Arbitrary Option Update discovered in WordPress Tabs plugin versions = 3.5.4. Solution Update the WordPress Tabs plugin to the latest available version at least 3.6.0...

Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update

The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options...

Tabs < 3.6.0 - Unauthenticated Arbitrary Option Update

The plugin does not have any authorisation in its REST API endpoint, one of them could allow unauthenticated attackers to update arbitrary blog options. PoC...

PYSEC-2021-386

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

CVE-2021-41247

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

JupyterHub 代码问题漏洞

JupyterHub is a multi-user server for Jupyter. A security vulnerability exists in JupyterHub that stems from the fact that in affected versions, users with multiple JupyterLab tabs open in the same browser session may see an incomplete logout from a single-user server because the new credentials...

PT-2021-23211 · Unknown · Jupyterlab +1

Name of the Vulnerable Software and Affected Versions: JupyterHub versions prior to 1.5 Description: The issue affects users of JupyterLab with JupyterHub who have multiple JupyterLab tabs open in the same browser session. When logging out, fresh credentials for the single-user server are...