3270 matches found
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits
At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept PoC exploi...
cobaltshowcase.bpt.me Cross Site Scripting vulnerability OBB-3424690
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Pink Drainer Posed as Journalists, Stole $3M from Discord and Twitter Users
By Habiba Rashid Pink Drainer hacking group has been employing sophisticated social engineering techniques, often masquerading as journalists from reputable media outlets like Decrypto and Cointelegraph. This is a post from HackRead.com Read the original post: Pink Drainer Posed as Journalists,...
sc.lib.thu.edu.tw Cross Site Scripting vulnerability OBB-3405956
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Now’s not the time to take our foot off the gas when it comes to fighting disinformation online
Welcome to this weeks edition of the Threat Source newsletter. In the wake of the 2016 and 2020 presidential elections, it seemed like big tech companies were taking the fight against disinformation seriously. Social media outlets set up new fact-checking procedures and got more aggressive about...
ti.caieiras.sp.gov.br Cross Site Scripting vulnerability OBB-3383949
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
Software Kebo Twitter Feed Type Plugin Vulnerable versions = 1.5.12 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34384 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID c50e5aab5720 Credits István Márton...
wowkorea.jp Cross Site Scripting vulnerability OBB-3372770
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
careerlauncher.com Cross Site Scripting vulnerability OBB-3371969
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2014-125103
A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttrsettingspage of the file twitter.php. The manipulation of the argument twttrurltwitter/bwslicensekey/bwslicenseplugin leads to...
Cross site scripting
A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttrsettingspage of the file twitter.php. The manipulation of the argument twttrurltwitter/bwslicensekey/bwslicenseplugin leads to...
CVE-2014-125103 BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting
A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttrsettingspage of the file twitter.php. The manipulation of the argument twttrurltwitter/bwslicensekey/bwslicenseplugin leads to...
CVE-2014-125103 BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting
A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttrsettingspage of the file twitter.php. The manipulation of the argument twttrurltwitter/bwslicensekey/bwslicenseplugin leads to...
CVE-2014-125103
The vulnerability CVE-2014-125103 affects the BestWebSoft Twitter Plugin for WordPress up to version 1.3.2. The issue resides in the function twttr_settings_page (twitter.php), where input manipulation of twttr_url_twitter, bws_license_key, or bws_license_plugin enables cross-site scripting (XSS)...
CVE-2012-10015
A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttrsettingspage of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch...
CVE-2014-125103: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttrsettingspage of the file twitter.php. The manipulation of the argument twttrurltwitter/bwslicensekey/bwslicenseplugin leads to...
WordPress Custom Twitter Feeds (Tweets Widget) Plugin < 2.0 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:smashballoon:customtwitterfeeds"; if description...
WordPress Plugin BestWebSoft Twitter 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2023-10171 · Bestwebsoft · Bestwebsoft Twitter Plugin
Name of the Vulnerable Software and Affected Versions: BestWebSoft Twitter Plugin versions up to 1.3.2 Description: A vulnerability was found in the BestWebSoft Twitter Plugin. It affects the function twttr settings page of the file twitter.php. The manipulation of the argument twttr url...
CVE-2012-10015
CVE-2012-10015 affects the BestWebSoft Twitter Plugin for WordPress (versions up to 2.14). Affected is the function twttr_settings_page in twitter.php of the Settings Page component, where a cross-site request forgery (CSRF) vulnerability exists. The issue can be triggered remotely; upgrading to ...