toy-blog Security Breach

toy-blog is a CMS system by the individual developer Kisaragi. A security vulnerability exists in toy-blog versions prior to 0.5.4 through 0.6.1, which stems from the ability to read articles with private visibility if the reader does not set the requested credentials...

Unspecified Vulnerability in JetBrains YouTrack (CNVD-2025-16877)

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on social media with information stealer malware and carries out cryptocurrency theft. The attack chains involve the use of a purported virtual meeting...

CVE-2024-38504

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...

CVE-2024-38504

In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool that supports cloud hosting and local deployment, and is primarily geared towards team collaboration management, especially suitable for software development, human resources, marketing, and other scenarios. JetBrains YouTrack suffers from a securit...

CVE-2024-28229

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

Design/Logic Flaw

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

CVE-2024-28229

In JetBrains YouTrack before 2024.1.25893 user without appropriate permissions could restore issues and articles...

PT-2024-2107 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.1.25893 Description: The issue is related to insufficient authorization mechanisms in JetBrains YouTrack, allowing a remote attacker to bypass existing security restrictions. This could enable a user...

Phishing Attack

phpmyfaq/phpmyfaq is vulnerability to a Phishing Attack. The vulnerability is due the functionality to share articles. This vulnerability allows an unauthenticated attacker to utilize the target application's email server to send thousands of phishing messages because the backend email address...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

Jianhua Sun LightCMS Cross-Site Scripting Vulnerability

Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system , can also be used as a general-purpose back-end management framework . Jianhua Sun LightCMS v2.0 version of a cross-site scripting vulnerability , the vulnerability stems from the Management -...

PT-2024-19485 · Lightcms · Lightcms

Name of the Vulnerable Software and Affected Versions: LightCMS version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Content Management - Articles field. Recommendations: For version 2.0, update to a newer version that contains a fix for this issue, if available. If no...

CVE-2024-22559

CVE-2024-22559 affects LightCMS v2.0 with a Cross Site Scripting (XSS) vulnerability in the Content Management – Articles field. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed, and imp...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

GetSimple CMS 跨站脚本漏洞

GetSimple CMS is a content management system CMS written in PHP. A cross-site scripting vulnerability exists in GetSimple CMS version 3.3.16, which stems from the lack of effective filtering and escaping of user-supplied data when adding articles to the /admin/edit.php page, and can be exploited ...

The top 10 AI security articles you must read in 2024

We've curated a collection of 10 AI security articles that cover novel threats to AI models as well as strategies for developers to safeguard their models...

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

PT-2023-32666 · Icecms · Icecms

Name of the Vulnerable Software and Affected Versions: IceCMS version 2.0.1 Description: A vulnerability has been found in IceCMS, affecting an unknown function of the file /WebArticle/articles/ of the component Like Handler. This issue leads to improper enforcement of a single, unique action and...