17037 matches found
PT-2023-29389
Name of the Vulnerable Software and Affected Versions 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin versions = 1.15.18 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inje...
CVE-2023-45071: Improper Neutralization of Input During Web Page Generation
Unauth. Stored Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
PT-2023-32230
Name of the Vulnerable Software and Affected Versions Team Showcase plugin for WordPress versions up to, and including, 2.1 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode due to insufficient input sanitization and output escaping on...
CVE-2023-45070: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...
The vulnerability of the Microsoft Team Foundation Server project management and version control system, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the Microsoft Team Foundation Server project management and version control system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
Unbreakable Enterprise kernel security update
4.14.35-2047.530.5.1 - Revert 'rtnetlink: Reject negative ifindexes in RTMNEWLINK' Saeed Mirzamohammadi Orabug: 35896831 4.14.35-2047.530.5 - netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c Kyle Zeng Orabug: 35824288 CVE-2023-42753 - netfilter: xtu32: validate...
CVE-2023-45103
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
CVE-2023-45103
CVE-2023-45103 refers to a CSRF vulnerability in the WordPress plugin Permalinks Customizer (YAS Global Team Permalinks Customizer) affecting versions up to and including 2.8.2. The connected Patchstack/CVE-2023-45103 entries describe the issue as CSRF via post_settings, with an unpatched status ...
CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
HackerOne: Organization members can delete reports in teams they have no access to
Reports in teams could be deleted by organization members without access to those teams. The vulnerability allowed deletion of analytics reports for restricted teams through a GraphQL mutation even when members lacked permissions to view or edit those reports...
PT-2023-29404
Name of the Vulnerable Software and Affected Versions YAS Global Team Permalinks Customizer plugin versions = 2.8.2 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...
CVE-2023-45103: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
Mars: Test 4 █████
This is test team summary with limited disclosure...
Elon Musk Is Personally Undermining X’s Efforts to Curb Israel-Hamas War Disinformation
X’s Trust and Safety team says it’s working to remove false information related to the Israel-Hamas war. Meanwhile, Elon Musk is sharing conspiracies and chatting with QAnon promoters...
CVE-2023-41694
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...
CVE-2023-41694
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...