Artica Pandora FMS 跨站请求伪造漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. Artica Pandora FMS suffers from a cross-site request forgery vulnerability that originates in Pandora FMS v7.0NG.759 that...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions 21.0.0, 21.0.1, and 21.0.2 that...

CVE-2022-33169

IBM Robotic Process Automation (RPA) versions 21.0.0–21.0.2 are vulnerable to insufficiently protected credentials for users created via bulk upload. The IBM Security Bulletin (and associated CVE-2022-33169 records) confirm affected products and affected versions: IBM RPA < 21.0.3, IBM RPA for...

PT-2022-21719

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description The issue concerns insufficiently protected credentials for users created via a bulk upload. Recommendations For versions 21.0.0 through 21.0.2, consider restricting...

CVE-2022-33169: Insufficiently Protected Credentials

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

CVE-2022-33169

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

Improper Input Validation

Description Input validation is a frequently-used technique for checking potentially dangerous inputs in order to ensure that the inputs are safe for processing within the code, or when communicating with other components. When software does not validate input properly, an attacker is able to cra...

Newsletter SQL注入漏洞

Newsletter is a one-click bulk email solution. A security vulnerability exists in the Newsletter v3.x series of releases that stems from a security issue with the zemeznewsletteremail parameter...

Malicious code in sa-383-bulk-creative-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc6c432bfe7d8dd378007ac5eaa6114103d9d5708ce6d92ac2ea88cb6eb8640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1690

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

PT-2022-14048

Name of the Vulnerable Software and Affected Versions The Note Press WordPress plugin versions 0.1.10 and earlier Description The issue is related to an SQL injection problem. The Note Press WordPress plugin does not properly sanitise and escape the ids from the bulk actions before using them in ...

CVE-2022-1690: Improper Neutralization of Special Elements used in an SQL Command

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

Introducing EDR for Linux: Remediating and isolating threats on Linux servers

We’re excited to announce our new EDR for Linux offering, which extends our advanced protection and response capabilities to Linux devices via Nebula and OneView. In this post, we show you what remediating and isolating threats on Linux servers looks like with Malwarebytes EDR for Linux. Let’s ge...

CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

CVE-2022-1611

CVE-2022-1611 concerns the WordPress Bulk Page Creator plugin (pre-1.1.4). The root cause is missing nonce checks in the page-creation functionality, enabling cross-site request forgery (CSRF). The vulnerability is documented across multiple sources as allowing arbitrary page creation via CSRF. E...

CVE-2022-1611 Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

WordPress plugin Bulk Page Creator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Bulk Page Creator plugin versions prior to 1.1.4 are vulnerable to cross-site request forgery, whic...