Cloak Front End Email < 1.9.2 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC email name='" onmouseover="alert1"...

WordPress Cloak Front End Email Plugin <= 1.9.1 is vulnerable to Cross Site Scripting (XSS)

Software Cloak Front End Email Type Plugin Vulnerable versions = 1.9.1 Fixed in 1.9.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0150 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 8e7d5eb708ad Credits István Márto...

Unspecified Vulnerability in SecureWorks Red Cloak Windows Agent

SecureWorks Red Cloak Windows Agent is a security threat detection agent program for the Windows platform from SecureWorks USA. A security vulnerability exists in versions prior to SecureWorks Red Cloak Windows Agent 2.0.7.9. A local attacker can exploit this vulnerability to bypass security...

CVE-2019-19620

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the...

CVE-2019-19620

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the...

CVE-2019-19620

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the...

CVE-2019-19620

CVE-2019-19620 affects SecureWorks Red Cloak Windows Agent prior to 2.0.7.9. The issue is a local-privilege-like bypass where a local user can circumvent generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file, specifically impacting process-execution telemetry for ...

PT-2019-15888

Name of the Vulnerable Software and Affected Versions SecureWorks Red Cloak Windows Agent versions prior to 2.0.7.9 Description A local user can bypass the generation of telemetry alerts by removing NT AUTHORITYSYSTEM permissions from a file, which is limited in scope to the collection of...

CVE-2019-19620: Improper Preservation of Permissions

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the...

Cloak - Backdoor In Any Python Script With Some Tricks

Cloak is an intelligent python backdoor framework. What it exactly does? Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify. To evade basic detection, Cloak breaks the payload into several parts and places it in different places in t...

All Android Phones Vulnerable to Extremely Dangerous Full Device Takeover Attack

Researchers have discovered a new attack, dubbed 'Cloak and Dagger', that works against all versions of Android, up to version 7.1.2. Cloak and Dagger attack allows hackers to silently take full control of your device and steal private data, including keystrokes, chats, device PIN, online account...

Cloak & Encrypt < 2.0 - Cross-Site Scripting (XSS)

The url-cloak-encrypt WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2014-4563

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4563

Affected software : WordPress plugin URL Cloak & Encrypt (url-cloak-encrypt)

CVE-2014-4563: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

PT-2014-5978

Name of the Vulnerable Software and Affected Versions URL Cloak & Encrypt plugin versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the url parameter in the go.php file. Recommendations For URL Cloak & Encrypt plugi...

WordPress URL Cloak & Encrypt Plugin <= 2.0 - XSS

Because of this vulnerability in go.php, the attackers can inject arbitrary web script or HTML via the "url" parameter. Solution Update the plugin...