CVE-2024-8044 infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF

The infolinks Ad Wrap WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin infolinks Ad Wrap 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-38770 · Infolinks · Infolinks Ad Wrap Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: infolinks Ad Wrap WordPress plugin versions 1.0.0 through 1.0.2 Description: The issue is related to the lack of CSRF protection when updating settings in the infolinks Ad Wrap WordPress plugin. This could allow attackers to make a logged-in...

Huawei EulerOS: Security Advisory for libldb (EulerOS-SA-2024-2396)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)

The version of Microsoft Power Automate for desktop installed on the remote Windows host is 2.41.x 2.41.178.24249, 2.42.x 2.42.331.24249, 2.43.x 2.43.249.24249, 2.44.x 2.44.55.24249, 2.45.x 2.45.404.24249, 2.46.x 2.46.181.24249, or 2.47.x 2.47.119.24249. It is, therefore, affected by a remote cod...

CVE-2024-8317

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adalignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-8317

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adalignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-8317 WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adalignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-8317 WP AdCenter – Ad Manager & Adsense Ads <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adalignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

WordPress WP AdCenter plugin <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_alignment Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via adalignment Attribute vulnerability discovered by Francesco Carlucci in WordPress Plugin WP AdCenter versions = 2.5.6...

PT-2024-38935 · WordPress · Wp Adcenter

Name of the Vulnerable Software and Affected Versions: WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress versions up to, and including, 2.5.6 Description: The issue is related to Stored Cross-Site Scripting via the ad alignment attribute due to insufficient input sanitization and output...

WordPress plugin WP AdCenter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

Malicious code in @diotoborg/ad-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35f8f8f0d05b6ce293cc56903ee8b5b0bf687d1a8ae2c70bc3a670cc1fa71590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/est-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bf3524b360d01734e3e3f8afb998cea08c72a5e92b7cda4514e48d7c05fd6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ad-tenetur-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fab6a145678e1b75507d11af55503c893dd7c651ac8a1e8571867375896e7c4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8108 Malicious code in @diotoborg/ad-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35f8f8f0d05b6ce293cc56903ee8b5b0bf687d1a8ae2c70bc3a670cc1fa71590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/quia-ad-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c734f897b1830249d8f67ad0ad66de189830b9397f10099cc9eb13463a1262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ad-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2298e095ee31855c1ee771a3ff80e0fb74d27473fc63bb72997365f30c50149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/excepturi-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b2b73261705790240f1c0a6d64ce1e4b6f19576f0d343f0077156be876fd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/tempore-ad-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d5ad4a37dd1d78fcb4a5d4f9b64f9388bd40e4f0ed863516fd7fd77dd91a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...