how-to-make-money-with-google-adsense.htmlpublishing.com Cross Site Scripting vulnerability OBB-3845003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel security update

5.14.0-362.18.0.13.OL9 - nfp: fix use-after-free in areacacheget Jialiang Wang CVE-2022-3545 - drivers: net: slip: fix NPD bug in sltxtimeout Duoming Zhou CVE-2022-41858 - can: afcan: fix NULL pointer dereference in canrcvfilter Oliver Hartkopp CVE-2023-2166 - RDMA/core: Fix resolvepreparesrc...

MAL-2024-636 Malicious code in wlwz-2312-5107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434ac432ab1fcbcecb63885dd0b902e7ca022d1febac020fd6cd3da36e1decf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-19331

Name of the Vulnerable Software and Affected Versions QuantumCloud ChatBot with AI versions n/a through 5.1.0 Description The issue is related to the deserialization of untrusted data, which can lead to potential security risks. There is no information provided about the estimated number of...

WordPress plugin ChatBot with AI code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2024-22309: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0...

com.aol.microservices:micro-tomcat (>=0.83, <=0.84), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.84) +3 more potentially affected by CVE-2024-21733 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.83, =0.83, =0.9.4, =0.9.12 -...

IBM OpenPages with Watson Security Vulnerability

IBM OpenPages with Watson is an AI-powered financial risk analytics solution. The platform is based on AI technology to predict risk factors and minimize risk in financial activities by integrating, automatically identifying, measuring, monitoring, analyzing, and managing risk data through a numb...

CVE-2023-40683: Improper Authorization

IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks. By authenticating as an OpenPages user and using non-public APIs, an attacker could exploit this vulnerability to bypass security and gain unauthorized...

PT-2024-12905 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue is caused by insufficient authorization checks, allowing a remote attacker to bypass security restrictions. By authenticating as an OpenPages user and using non-public...

CVE-2021-24869

The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the seturlswithterms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber...

PT-2024-10893 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache versions prior to 0.9.5 Description: The issue is related to the set urls with terms method, which does not properly escape user input before using it in a SQL statement. This leads to an SQL injection that can be exploited b...

CVE-2023-5905: Missing Authorization

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as...

CVE-2023-50072: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...

OPENSUSE-SU-2024:0017-1 Security update for python-django-grappelli

This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks boo1216481 - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added impo...

CVE-2023-5448: Cross-Site Request Forgery (CSRF)

The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.9. This is due to missing or incorrect nonce validation on the updatepasswordvalidate function. This makes it possible for unauthenticated attackers to res...

PT-2024-14810

Name of the Vulnerable Software and Affected Versions WP Register Profile With Shortcode plugin for WordPress versions up to, and including, 3.5.9 Description The issue is related to Cross-Site Request Forgery. It is caused by missing or incorrect nonce validation on the update password validate...

This Week in Spring - January 9th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the second week of 2024, and I am already thinking about 2025! And, a bit more immediatelt than that: the next two weeks. I'll be at both VOXXED DAYS Ticino and VOXXED DAYS CERN, both in Switzerland. If you're about, com...

CVE-2023-47995: Buffer Copy without Checking Size of Input

Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...

PT-2024-8362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free error in the of parse phandle with args map function. This function has an inner loop that iterates through map entries and calls of node putnew to...