229 matches found
WordPress Safe SVG plugin < 2.2.6 - Author+ Cross Site Scripting (XSS) vulnerability
Author+ Cross Site Scripting XSS vulnerability discovered by Alexander Concha in WordPress Plugin Safe SVG versions 2.2.6...
Man Arrested for Snowflake Hacking Spree Faces US Extradition
Alexander “Connor” Moucka was arrested this week by Canadian authorities for allegedly carrying out a series of hacks that targeted Snowflake’s cloud customers. His next stop may be a US jail...
Canadian Man Arrested in Snowflake Data Extortions
A 25-year-old man in Ontario, Canada has been arrested for allegedly stealing data from and extorting more than 160 companies that used the cloud data service Snowflake. Image: https://www.pomerium.com/blog/the-real-lessons-from-the-snowflake-breach On October 30, Canadian authorities arrested...
CVE-2024-49669
Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...
CVE-2024-49669 WordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Upload a Web Shell to a Web Server.This issue affects INK Official: from n/a through = 4.1.2...
CVE-2024-49614
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SermonAudio SermonAudio Widgets sermonaudio-widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through = 1.9.3...
CVE-2024-49614 WordPress SermonAudio Widgets plugin <= 1.9.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Dan Alexander SermonAudio Widgets allows SQL Injection.This issue affects SermonAudio Widgets: from n/a through 1.9.3...
CVE-2024-49614
CVE-2024-49614 is a SQL Injection vulnerability in the WordPress plugin SermonAudio Widgets . The issue affects versions listed as “n/a through 1.9.3” and stems from improper neutralization of special elements used in SQL commands. Public references describe the vulnerability but do not provide c...
IronNet Has Shut Down
After retiring in 2014 from an uncharacteristically long tenure running the NSA and US CyberCommand, Keith Alexander founded a cybersecurity company called IronNet. At the time, he claimed that it was based on IP he developed on his own time while still in the military. That always troubled me...
CVE-2024-47643
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de Widgets: from n/a through = 4.0.0...
CVE-2024-47643
CVE-2024-47643 affects WordPress plugin Include Fussball.de Widgets
CVE-2024-47643 WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de Widgets: from n/a through = 4.0.0...
WordPress WP Accessibility Helper (WAH) Plugin <= 0.6.2.8 is vulnerable to Broken Access Control
Software WP Accessibility Helper WAH Type Plugin Vulnerable versions = 0.6.2.8 Fixed in 0.6.2.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5987 Patch priority Low CVSS severity Low 5.4 Developer Alexander Volkov PSID d7cc8b0ae32e Credits Lucio Sá...
WordPress WP Accessibility Helper (WAH) Plugin <= 0.6.2.9 is vulnerable to Broken Access Control
Software WP Accessibility Helper WAH Type Plugin Vulnerable versions = 0.6.2.9 Fixed in 0.6.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37926 Patch priority Low CVSS severity Low 5.3 Developer Alexander Volkov PSID 2dc3899d68ab Credits Mika Required...
MAL-2024-2216 Malicious code in down_load_ebook_the_hospital_by_brian_alexander_vbxhq (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_ebook_the_hospital_by_brian_alexander_vbxhq (npm)
--- -= Per source details. Do not edit below this line.=-...
alexander-meinzer.de Cross Site Scripting vulnerability OBB-3935984
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-V24P-7P4J-QVVF Contao: Cross site scripting in the file manager
Impact Users can insert malicious code into file names when uploading files, which is then executed in tooltips and popups in the backend. Patches Update to Contao 4.13.40 or Contao 5.3.4. Workarounds Disable uploads for untrusted users. References...
