WordPress Advanced Recent Posts Plugin <= 0.6.14 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Recent Posts Type Plugin Vulnerable versions = 0.6.14 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0212 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 40ae855e2918 Credits Lana Codes...

Snip3 Crypter an Advanced RAT Loader Targeting Multiple Industries

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary A multi-stage remote access trojan RAT loader called Snip3 crypter was recently discovered deploying RAT families, including QuasarRAT and DcRAT, to target victims...

WordPress WPB Advanced FAQ Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software WPB Advanced FAQ Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0370 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID cc6ff64c0266 Credits Lana Codes Required...

The Microsoft Intune Suite fuels cyber safety and IT efficiency

Today marks a significant shift in endpoint management and security. Were launching the Microsoft Intune Suite, which unifies mission-critical advanced endpoint management and security solutions into one simple bundle. The new Intune Suite can simplify our customers’ endpoint management experienc...

DEBIAN-CVE-2022-27672

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure...

ALPINE-CVE-2022-27672

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure...

UBUNTU-CVE-2022-27672

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure...

The vulnerability of the AMD Secure Encrypted Virtualization (SEV) technology in microprogramming software for AMD processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of AMD Secure Encrypted Virtualization SEV microprogramming software for processors is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of AMD’s microprogrammed security processor BIOS systems, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of AMD’s microprogrammed security processor BIOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of AMD’s SMT processor technology, which allows a hacker to disclose protected information

The vulnerability of AMD’s SMT processor technology is related to errors that occur after the processor’s core exits the C0 sleep state. Exploiting this vulnerability can allow an attacker to disclose protected information i.e., gain access to the RAP Return Address Predictor...

The vulnerability of the BIOS microprogramming system of AMD processors allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of AMD microprocessor BIOS microprogramming systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the Bootloader component of AMD processors allows a hacker to trigger a system failure.

The vulnerability of the Bootloader component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of AMD microprocessor BIOS microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system of AMD processors lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerabilities of AMD Secure Processor (ASP), System Management Unit (SMU), and Secure Encrypted Virtualization (SEV) related to initialization errors allow attackers to disclose protected information.

The vulnerabilities of AMD Secure Processor ASP, System Management Unit SMU, and Secure Encrypted Virtualization SEV related to initialization errors allow attackers to expose protected information...

多款WAGO产品 访问控制错误漏洞

WAGO Series PFC100 and others are products of WAGO, Germany.WAGO Series PFC100 is a programmable logic controller.WAGO Series PFC200 is a programmable logic controller.WAGO Edge Controller is an edge controller. An access control error vulnerability exists in multiple WAGO products. An attacker...

WAGO公司多款产品访问控制错误漏洞

WAGO Compact Controller CC100 and WAGO Edge Controller are both products of WAGO GmbH & Co. KG.WAGO Compact Controller CC100 is a compact controller.WAGO Edge Controller is an edge controller. An access control error vulnerability exists in some WAGO GmbH & Co. KG products. An attacker could use...

PT-2025-40190

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ACPI processor component related to the devm kzalloc function. A failure in devm kzalloc can lead to a NULL pointer dereference because clk...

[SECURITY] Fedora 37 Update: khotkeys-5.27.1-1.fc37

An advanced editor component which is used in numerous KDE applications requiring a text editing component...

Security Bulletin: CVE-2022-3676 may affect IBM CICS TX Advanced

Summary Eclipse Openj9 with IBM Java could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. By sending a specially-crafted request using bytecode, an attacker could exploit this vulnerability to access or modify memory. This...

Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Advanced

Summary CVE-2018-1099, CVE-2018-1098 related to etcd package may affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2018-1099 DESCRIPTION: etcd could allow a remote attacker to gain access to the DNS records, caused by a DNS...