CVE-2025-22732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

CVE-2025-22732 WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

CVE-2025-22732 WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Admiral Ad Blocking Detector ad-blocking-detector allows Stored XSS.This issue affects Ad Blocking Detector: from n/a through = 3.6.0...

CVE-2025-22732

CVE-2025-22732 affects Ad Blocking Detector (WordPress plugin) with a Stored XSS vulnerability in input handling during web page generation. Affected range: from n/a through version 3.6.0. CVSSv3.1 base score 6.5 (Medium) with Network attack vector, Privileges Required: Low, User Interaction: Req...

WordPress plugin Ad Blocking Detector 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ad-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa203eed643427755b02207456b1deb0838e2d56b76368ad46a08dfd5b087e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ad-shield-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52a7e1710e2d79d0dbdce080eb340926c5b9099faea1b5116d16c5620e04a278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-154 Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ad-shield-essential-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204851191eeff7f39b152f6eea9aadd2303a89c305e1ea65c73ac3c54c96a25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-151 Malicious code in ad-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa203eed643427755b02207456b1deb0838e2d56b76368ad46a08dfd5b087e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-152 Malicious code in ad-shield-essential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52a7e1710e2d79d0dbdce080eb340926c5b9099faea1b5116d16c5620e04a278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-153 Malicious code in ad-shield-essential-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204851191eeff7f39b152f6eea9aadd2303a89c305e1ea65c73ac3c54c96a25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Ad Blocking Detector plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Ad Blocking Detector versions = 3.6.0...

ipa security update

4.12.2-1.0.1.3 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-1.3 - Resolves: RHEL-69928 add support for python cryptography 44.0.0 - Resolves: RHEL-70258 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP...

BIT-MATTERMOST-2024-23493

Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of...

Malicious ad distributes SocGholish malware to Kaiser Permanente employees

On December 15, we detected a malicious campaign targeting Kaiser Permanente employees via Google Search Ads. The fraudulent ad masquerades as the health care company's HR portal used to check for benefits, download paystubs and other corporate related tasks. We believe the threat actors' intent...

CVE-2024-12411

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2024-12411 WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...

CVE-2024-12411 WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More <= 2.5.4 - Reflected Cross-Site Scripting

The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible fo...