WordPress plugin WP AdCenter – Ad Manager & Adsense Ads 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Advertisers are pushing ad and pop-up blockers using old tricks

Despite the countermeasures some services are taking against well-known ad blockers, lots of people now use one. This is no doubt due to increased privacy concerns around online tracking, along with the growing number of ads per site. And where there is money to be made, you’ll find social...

Malicious code in @bytedanc-ad/mui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a2d4c3edc0b12c58d88c7087781cde9cc59dd64bad30da86b31a489fdc2753 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue3' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10466 Malicious code in @bytedanc-ad/mui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c30379ad4ca7a644dc00d7fe6583a1f268e6fb8e076179cf094519d27cf2dc54 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue2' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

Malicious code in @bytedanc-ad/mui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c30379ad4ca7a644dc00d7fe6583a1f268e6fb8e076179cf094519d27cf2dc54 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue2' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10468 Malicious code in @bytedanc-ad/mui-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ee17d0d32e34f84760ba260fb5dd3f19a50a1a449169e197845150f3ea991d2 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-wc' @ 89.3.5 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @bytedanc-ad/mui-wc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ee17d0d32e34f84760ba260fb5dd3f19a50a1a449169e197845150f3ea991d2 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-wc' @ 89.3.5 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-10465 Malicious code in @bytedanc-ad/mui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b302cda103ab4e9d60bced8da79df7126ab12cceee30b5ca171d20bc10c1a77 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-react' @ 89.3.5 npm as malicious. It is considered malicious because: - The...

CVE-2024-34887

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...

CVE-2024-34887

CVE-2024-34887 affects 1C-Bitrix Bitrix24 23.300.100. The issue is "insufficiently protected credentials" in AD/LDAP server settings, enabling remote administrators to exfiltrate AD/LDAP administrator passwords to an arbitrary server via HTTP POST. Public sources (Red Hat, CNNVD, CVE listings) de...

CVE-2024-34887

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request...

Lumma/Amadey: fake CAPTCHAs want to know if you’re human

Attackers are increasingly distributing malware through a rather unusual method: a fake CAPTCHA as the initial infection vector. Researchers from various companies reported this campaign in August and September. The attackers, primarily targeting gamers, initially delivered the Lumma stealer to...

Huawei EulerOS: Security Advisory for libldb (EulerOS-SA-2024-2706)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Metasploit Weekly Wrap-Up 10/18/2024

ESC15: EKUwu AD CS continues to be a popular target for penetration testers and security practitioners. The latest escalation technique hence the the ESC in ESC15 was discovered by Justin Bollinger with details being released just last week. This latest configuration flaw has common issuance...

WordPress Advanced Category and Custom Taxonomy Image plugin <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via adtaximage Shortcode vulnerability discovered by theviper17y in WordPress Plugin Advanced Category and Custom Taxonomy Image versions = 1.0.9...

CVE-2024-49248

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spacetime Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through = 2.7.37...

CVE-2024-49248

CVE-2024-49248 affects WordPress Ad Inserter plugin (versions

CVE-2024-49248 WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spacetime Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through = 2.7.37...

CVE-2024-49248 WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spacetime Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through = 2.7.37...