PT-2024-14842 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: The WP Custom Cursors | WordPress Cursor Plugin versions through 3.2 Description: The issue allows high privilege users, such as admin, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, fo...

A New Face of AsyncRAT Utilizes WSF Scripts to Spread

Summary: AsyncRAT is a remote access trojan RAT malware known for stealing credentials and executing various malicious activities since 2019. Its recent variant, distributed through WSF script files, employs sophisticated fileless techniques, emphasizing the importance of user caution and robust...

MAL-2023-8621 Malicious code in vivo-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddc60ba6935a3a4569ba5dec15c6cf00eb68779bc86d09178839c459ffb15de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-46121 Generic Extractor MITM Vulnerability in yt-dlp

yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie...

PYSEC-2023-195

OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...

Exploit for Improper Access Control in Citrix Sharefile_Storage_Zones_Controller

CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It need...

How to auto launch published app while logon Storefront Web URL

This article describes how to enable and customize "auto launch published app" feature from Storefront server. Caution! Citrix does not support or assist with this customized configuration. Perform this modification at your own risk. If you do proceed, make sure to always take a backup before...

Exploit for Deserialization of Untrusted Data in Spip

Installation et Exécution du script 💻 Prérequis Avant de...

MAL-2023-526 Malicious code in ing-orange-be-isabel-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ce7051b695847f4d4250516dd3188a5d6221f66c81b500bacac67d1154d380 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MediaArena: A Deceptive Browser Hijacker Exploiting User Data and Security Threats

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MediaArena is a deceptive software that hijacks browsers, redirects searches, and collects user data for malicious activities, emphasizing the importance of removal and caution. To receive real-time thre...

Exploit for Code Injection in Apache Rocketmq

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023...

SUSE CVE-2023-29007

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted .gitmodules file with submodule URLs that are longer than 1024 characters can used to exploit a bug in...

SUSE CVE-2023-22490

Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort loca...

SUSE CVE-2021-29509

Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same...

Stored XSS edit Config Link

Description Stored Cross-Site Scripting XSS through hyperlinks refers to a type of security vulnerability that occurs when an attacker injects malicious code into a hyperlink, which is then stored in the application's database or web server. When a user clicks on the infected hyperlink, the...

Exploit for Race Condition in Apple Safari

Mandela Rewritten iOS customization app powered by CVE-202...

MAL-2023-50 Malicious code in @playgami/eslint-config-portal-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83105996605b836f1b53a8a2f0c7d6e4178af363031bd770f6c579e8bef9c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Forging Ahead in 2023: Insights From Trend Micro’s 2023 Security Predictions

In 2023, cybercriminals and defenders alike will have to move forward with caution in the face of a business landscape that’s fraught with security blindsides and economic ebbs and flows...

caudron-svv.com Cross Site Scripting vulnerability OBB-3085183

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in m5d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c0eefe62c7b256b4dce3e00d3a7ec577364f132a34f274a377bea8506c5bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...