WordPress FormCraft Plugin <= 1.2.10 is vulnerable to Broken Access Control

Software FormCraft Type Plugin Vulnerable versions = 1.2.10 Fixed in 1.2.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43157 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1cdc8206182d Credits Manab Jyoti Dowarah Required...

PT-2024-26035 · Librtp.So · Librtp.So

Name of the Vulnerable Software and Affected Versions: librtp.so versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper input validation, allowing remote attackers to execute arbitrary code with system privilege. User interaction is required to trigger this issue...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2024 Release 1 prior to version 1, which stems from an improper access control issue...

WordPress Waitlist Woocommerce ( Back in stock notifier ) Plugin <= 2.6 is vulnerable to Broken Access Control

Software Waitlist Woocommerce Back in stock notifier Type Plugin Vulnerable versions = 2.6 Fixed in 2.6.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43134 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 01b4cf6b7218 Credits Abd...

WordPress Spectra Plugin <= 2.14.1 is vulnerable to Cross Site Scripting (XSS)

Software Spectra Type Plugin Vulnerable versions = 2.14.1 Fixed in 2.15.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-7590 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a51e418171d1 Credits João Pedro S Alcântara Kinorth Required...

CVE-2024-23350

creationtimestamp| type| source ---|---|--- 2024-08-06 17:20:05+00:00| exploited| https://t.me/truesecator/6062 2024-08-22 06:58:46+00:00| exploited| Telegram/AgjfB-3cINMww0GRPlAdFiLTwduyPUHZp0qeD4lbHj3unQ 2024-08-22 07:08:27+00:00| exploited| Telegram/CkdT0j86kMtmX3D6r0X-LvUAF1FTWYErK67ls9SMTHQw...

CVE-2024-7520

creationtimestamp| type| source ---|---|--- 2024-08-06 15:51:23+00:00| seen| https://t.me/cvedetector/2583...

CVE-2024-7538

creationtimestamp| type| source ---|---|--- 2024-08-06 03:17:42+00:00| seen| https://t.me/cvedetector/2508...

Pixel Update Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-08-05 or later address all issues in this bulletin and all issues in the August 2024 Android...

Pixel Watch Security Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-07-05 or later address all applicable issues in the July 2024 Android Security Bulletin and all issues in this bulletin. T...

waltersgardens.com Cross Site Scripting vulnerability OBB-3953602

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-30920

creationtimestamp| type| source ---|---|--- 2024-08-05 18:56:53+00:00| seen| https://t.me/CyberSecurityTechnologies/4652...

CVE-2024-41889

creationtimestamp| type| source ---|---|--- 2024-08-05 08:03:08+00:00| seen| https://t.me/cvedetector/2430 2024-08-06 09:23:58+00:00| seen| https://t.me/CyberBulletin/269 2024-08-06 10:50:28+00:00| published-proof-of-concept| https://t.me/HackingInsights/8805...

WordPress TemplateSpare Plugin <= 2.4.2 is vulnerable to Broken Access Control

Software TemplateSpare Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.4.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6872 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 61e41ef1fa5e Credits Lucio Sá Required privilege...

Wear OS Security Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-08-05 or later from the August 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...

Android Security Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

lab-qacademy.com Cross Site Scripting vulnerability OBB-3953435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

badreligion.store Cross Site Scripting vulnerability OBB-3953142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

trocotel.com Cross Site Scripting vulnerability OBB-3952936

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dymky-online.cz Cross Site Scripting vulnerability OBB-3952847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...