5434 matches found
PT-2025-1558 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the netfilter: nf tables component in the Linux kernel, where the set backend has been adapted to use the GC transaction API. This change replaces the old and buggy ...
WordPress Plugin Alexey Golubnichenko AGP Font Awesome Collection Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Alexey Golubnichenko AGP...
CVE-2023-3716
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...
CVE-2023-3716
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection.This issue affects Online Collection Software: before 1.0.1...
CVE-2023-3716
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection.This issue affects Online Collection Software: before 1.0.1...
CVE-2023-3716 SQLi in Oduyo Online Collection Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...
CVE-2023-3716
CVE-2023-3716 describes an SQL injection vulnerability in Oduyo Online Collection Software prior to version 1.0.1. The issue arises from improper neutralization of special elements in SQL commands, allowing an attacker to manipulate queries. Affected component is the Online Collection Software (v...
CVE-2023-3716 SQLi in Oduyo Online Collection Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oduyo Online Collection Software allows SQL Injection. This issue affects Online Collection Software: before 1.0.1...
Oduyo Online Collection Software SQL Injection Vulnerability
Oduyo Online Collection Software is a software from Oduyo, Inc. Oduyo Online Collection Software before 1.0.1 suffers from a SQL injection vulnerability that stems from incorrect neutralization of special elements used in SQL commands...
jettison: Uncontrolled Recursion in JSONArray
A flaw was found in Jettison. Infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This issue leads to a StackOverflowError exception being thrown...
jettison: Uncontrolled Recursion in JSONArray
A flaw was found in Jettison. Infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This issue leads to a StackOverflowError exception being thrown...
A week in security (July 31 - August 6)
Last week on Malwarebytes Labs: The end looms for Meta's behavioural advertising in Europe Microsoft Teams used in phishing campaign to bypass multi-factor authentication Film companies lose battle to unmask Reddit users FAQ: How does Malwarebytes ransomware rollback work? How to protect your...
CLSA-2023-1691083401 Fix CVE(s): CVE-2022-3697
SECURITY UPDATE: improper handling of towercallback parameter in amazon.aws collection - debian/patches/CVE-2022-3697.patch: ec2instance - validate options on towercallback - CVE-2022-3697 Enable unit testing...
Meta subsidiaries must pay $14m over misleading data collection disclosure
Meta has run into yet another bout of court related issues--two subsidiaries have been ordered to pay $14 million regarding undisclosed data collection. The Australian case, which has rumbled on for the best part of two and a half years, has focused on claims related to a now discontinued Virtual...
Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor
Threat actors associated with the hacking crew known as Patchwork have been spotted targeting universities and research organizations in China as part of a recently observed campaign. The activity, according to KnownSec 404 Team, entailed the use of a backdoor codenamed EyeShell. Patchwork, also...
Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse
Apple has announced plans to require developers to submit reasons to use certain APIs in their apps starting later this year with the release of iOS 17, iPadOS 17, macOS Sonoma, tvOS 17, and watchOS 10 to prevent their abuse for data collection. "This will help ensure that apps only use these API...
WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)
Software AGP Font Awesome Collection Type Plugin Vulnerable versions = 3.2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30481 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba2b59776bbc Credits Skalucy...
GHSA-GGGM-66RH-PP98 Incorrect Permission Checking for GraphQL Subscriptions
Summary CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Access to information you should not have access to when the permissions rely on $CURRENTUSER for filtering. Details The permission filters i.e. usercreated IS $CURRENTUSER are not properly checked when using GraphQL...
