WordPress Apa Banner Slider plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Apa Banner Slider versions = 1.0.0...

WordPress APA Register Newsletter Form Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software APA Register Newsletter Form Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-49621 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 167103aaee5c Credits João Pedro S Alcânta...

WordPress Apa Banner Slider Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Apa Banner Slider Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49622 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 3a1fe5097420 Credits João Pedro S...

apa-con.com Cross Site Scripting vulnerability OBB-3846610

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apa-industries.com Cross Site Scripting vulnerability OBB-3574866

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apa-industries.com Cross Site Scripting vulnerability OBB-3354922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in apa-root-pzatj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346f5d3c01850268c4184487120f068294c14e1e480d6f541c19e03f87ad4747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1034 Malicious code in apa-root-pzatj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 346f5d3c01850268c4184487120f068294c14e1e480d6f541c19e03f87ad4747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-25461

An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow...

New Guide: How Akamai Helps You Protect Privacy Data

Laws and regulations related to personally identifiable information PII are continuously being enacted around the world as data breaches and abuses persist. According to the February 2020 United Nations Conference on Trade and Development, 132 out of 194 countries had legislation put in place to...

induction.apa.com.au XSS vulnerability

Vulnerable URL: http://induction.apa.com.au/include/reminder.asp?lang=xss%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=2= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

citefast.com XSS vulnerability

Vulnerable URL: http://www.citefast.com/styleguide.php?style=APA=1"...

Apache OFBiz - SQL Remote Execution PoC Payload

No description provided by source. / Apache OFBiz SQL Remote Execution PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var cmd = 'command'; var xmlhttp=false; try xmlhttp = new ActiveXObjectMsxml2.XMLHTTP; catch e...

Apache OFBiz - FULLADMIN Creator PoC Payload

No description provided by source. / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes =...

TornadoStore 1.4.3 SQL Injection

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple SQL Injection in TornadoStore 1.4.3 1. Advisory Information Title: Multiple SQL Injection in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0106 Advisory URL:...

TornadoStore 1.4.3 Cross Site Scripting

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in TornadoStore 1.4.3 1. Advisory Information Title: Multiple XSS in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0107 Advisory URL:...

TornadoStore 1.4.3 XSS Vulnerability

Exploit for php platform in category web applications ==================================== TornadoStore 1.4.3 XSS Vulnerability ==================================== 1. Advisory Information Title: Multiple XSS in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0107 Advisory URL:...

Multiple XSS in TornadoStore 1.4.3

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in TornadoStore 1.4.3 1. Advisory Information Title: Multiple XSS in TornadoStore 1.4.3 Advisory ID: BONSAI-2010-0107 Advisory URL:...

Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php Date...

Apache OFBiz - Admin Creator

Apache OFBiz - Admin Creator / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes =...