Malicious ad distributes SocGholish malware to Kaiser Permanente employees

On December 15, we detected a malicious campaign targeting Kaiser Permanente employees via Google Search Ads. The fraudulent ad masquerades as the health care company's HR portal used to check for benefits, download paystubs and other corporate related tasks. We believe the threat actors' intent...

CVE-2024-11711: Improper Neutralization of Special Elements used in an SQL Command

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'resumeid' parameter in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2024-11710: Improper Neutralization of Special Elements used in an SQL Command

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to SQL Injection via the 'fieldfor', 'visibleParent' and 'id' parameters in all versions up to, and including, 2.2.2 due to insufficient escaping on the user supplied parameter an...

The vulnerability of the Naumen Service Management Platform’s portal for automating business processes is related to the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the Naumen Service Management Platform Naumen SMP Portal lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

MAL-2024-11815 Malicious code in fidentity-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce37a844e887ce29a4c02c56af5b1d9ce7e31d1955ef5606b1a5e6be05d152d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fidentity-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce37a844e887ce29a4c02c56af5b1d9ce7e31d1955ef5606b1a5e6be05d152d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in internal-website

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-12338 Website Toolbox Community <= 2.0.1 - Reflected Cross-Site Scripting via websitetoolbox_username

The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolboxusername’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

CVE-2024-12338

CVE-2024-12338 affects Website Toolbox Community plugin for WordPress. The vulnerability is a Reflected Cross-Site Scripting via the websitetoolbox_username parameter in all versions up to 2.0.1, caused by insufficient input sanitization and output escaping. Impact: attackers can inject web scrip...

WordPress Website Toolbox Community plugin <= 2.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Website Toolbox Community versions = 2.0.1...

CVE-2024-12338: Improper Neutralization of Input During Web Page Generation

The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolboxusername’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

WordPress plugin Website Toolbox Community 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

The vulnerability of the Drupal CMS system, related to insufficient protection of website structures, allows attackers to carry out XSS attacks.

The vulnerability of the Drupal CMS system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the Drupal CMS system’s kernel allows attackers to carry out XSS attacks.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

PT-2024-17550 · WordPress · Website Toolbox Community

Name of the Vulnerable Software and Affected Versions: Website Toolbox Community plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows...

The software for managing and publishing geodata on the OSGeo GeoServer platform is vulnerable due to lack of measures taken to protect the website structure. This vulnerability allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the software for managing and publishing geodata on the OSGeo GeoServer server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks X...

MAL-2024-12152 Malicious code in lfs-au-website-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lfs-au-website-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1cede85f63ef726a200198c527060cd81e0506a726fc5ad92ce154a3873e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12393

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...

Adobe Connect 输入验证错误漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Connect, which stems from the system's failure to appropriately handle target jumps, and can be exploited by an attacker to redirect a use...