phpRecDB Cross-Site Scripting Vulnerability

phpRecDB is a free php script from phpRecDB Inc. It is used to create a real-time record collection website. A cross-site scripting vulnerability exists in phpRecDB version 1.3.1, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter r/view of the fi...

Gigabud RAT Android Banking Malware Targets Institutions Across Countries

Account holders of over numerous financial institutions in Thailand, Indonesia, Vietnam, the Philippines, and Peru are being targeted by an Android banking malware called Gigabud RAT. "One of Gigabud RAT's unique features is that it doesn't execute any malicious actions until the user is authoriz...

collection.bendigoartgallery.com.au Cross Site Scripting vulnerability OBB-3583798

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

collection-annalisa.com Cross Site Scripting vulnerability OBB-3576215

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Obfusticated Email Address Exfiltration

moq is vulnerable to Email Address Exfiltration. The vulnerability is due to including the SponsorLink.dll in version 4.20.0, which secretly exfiltrates the email address set in the user.email config parameter of git. This email address is hashed and sent to devlooped.com over TLS. The hidden...

Google’s “browse privately” is nothing more than a word play, lawyers say

Google will have to appear in court after a judge denied their request for summary judgment in a lawsuit filed by users alleging the company illegally invaded the privacy of millions of people. Lawsuits against big tech over privacy issues are not much of a surprise these days, unfortunate as tha...

CVE-2023-30481

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin = 3.2.4 versions...

CVE-2023-30481

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin = 3.2.4 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin = 3.2.4 versions...

CVE-2023-30481

CVE-2023-30481 affects the WordPress plugin AGP Font Awesome Collection, version

PT-2025-1558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the netfilter: nf tables component in the Linux kernel, where the set backend has been adapted to use the GC transaction API. This change replaces the old and buggy gc...

PT-2023-22719

Name of the Vulnerable Software and Affected Versions Alexey Golubnichenko AGP Font Awesome Collection plugin versions = 3.2.4 Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

WordPress Plugin Alexey Golubnichenko AGP Font Awesome Collection Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Alexey Golubnichenko AGP...

CVE-2023-30481: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin = 3.2.4 versions...

CVE-2023-3716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection.This issue affects Online Collection Software: before 1.0.1...

CVE-2023-3716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...

CVE-2023-3716

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection.This issue affects Online Collection Software: before 1.0.1...

CVE-2023-3716 SQLi in Oduyo Online Collection Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...

CVE-2023-3716

CVE-2023-3716 describes an SQL injection vulnerability in Oduyo Online Collection Software prior to version 1.0.1. The issue arises from improper neutralization of special elements in SQL commands, allowing an attacker to manipulate queries. Affected component is the Online Collection Software (v...