The SEC Won't Let CISOs Be: Understanding New SaaS Cybersecurity Rules

The SEC isn't giving SaaS a free pass. Applicable public companies, known as "registrants," are now subject to cyber incident disclosure and cybersecurity readiness requirements for data stored in SaaS systems, along with the 3rd and 4th party apps connected to them. The new cybersecurity mandate...

MAL-2024-949 Malicious code in diil-front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a63442371776ec2bb7ec621217d72fc34d237c28b8da4150e0bb243e05ff3dd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the ILIAS learning management and support system, related to the improper implementation of the sequence of actions to be performed, allows a perpetrator to execute arbitrary system commands on the application server.

The vulnerability of the ILIAS learning management and support system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to execute arbitrary system commands on the application server remotely...

CVE-2023-6279

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a specific option name...

CVE-2023-6279

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a specific option name...

Code injection

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a specific option name...

MAL-2024-941 Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-14923 · WordPress · Woostify Sites Library

Name of the Vulnerable Software and Affected Versions: Woostify Sites Library WordPress plugin versions prior to 1.4.8 Description: The issue concerns a lack of authorization in an AJAX action, allowing any authenticated users to update arbitrary blog options and set them to 'activated'. This cou...

Atlassian Confluence 8.0 < 8.5.4 (CONFSERVER-93833) (Direct Check)

Binary data confluencecve202322527.nbin...

PDF Poster - PDF Embedder Plugin for WordPress < 2.1.18 - Reflected Cross-Site Scripting

Description The PDF Poster - PDF Embedder Plugin for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.1.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

10Web AI Assistant – AI content writing assistant < 1.0.19 - Missing Authorization to Arbitrary Plugin Installation

Description The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the installplugin AJAX action in all versions up to, and including, 1.0.18. This makes it possible for authenticated...

MAL-2024-912 Malicious code in wlwz-2312-8203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6157f55472c57f53d1d451afa02655698597f9535be7021e5e9f9b0552863e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-894 Malicious code in wlwz-2312-8004 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe20d610fac42ed237437021b64cb0e9dd8edffe8b40ca212f8064bec973dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-878 Malicious code in wlwz-2312-7806 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429f162a437e29e187824827b59e4917853e02e9517a5bafaffd7c4df62202b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-798 Malicious code in wlwz-2312-6907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 951416c5b0286df301b1ebb8dfbc710b30bfccab2e25b169a3addf325b5018eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-791 Malicious code in wlwz-2312-6900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 526a14ac8ff7efa90cb121fc4a09250ab5a15f9db7ec1a1f75ad97e3da6585a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-768 Malicious code in wlwz-2312-6604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6e9597277373c0e02a3c399de39651570d2ad85021bca5fb0e627b67ac88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-819 Malicious code in wlwz-2312-7201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b2a12072c7d0115cea54d40893e9ff1d8434df287859edd2cd1c69e1c3dac19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-757 Malicious code in wlwz-2312-6502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715e28976702943d926623a5bb3a7b98c5100ca077cca6421041d8be86a42361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-738 Malicious code in wlwz-2312-6301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9777bec12419943d2eba94dd01bb4d12ad72e82627353fc463db4e6527691be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...