8789 matches found
CVE-2024-26279 [20240704] - Core - XSS in Wrapper extensions
The wrapper extensions do not correctly validate inputs, leading to XSS vectors...
HUMINT: Diving Deep into the Dark Web
Discover how cybercriminals behave in Dark Web forums- what services they buy and sell, what motivates them, and even how they scam each other. Clear Web vs. Deep Web vs. Dark Web Threat intelligence professionals divide the internet into three main components: Clear Web - Web assets that can be...
Joomla! Security Vulnerabilities
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! that stems from improper input handling and could lead to a cross-site scripting XSS vulnerability...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: airflow, kubeflow-pipelines, az, barman, nvidia-nsight-compute-13.1, reflex, patroni, kubeflow-volumes-web-app, nvidia-nsight-compute-13.2, jwt-tool, superset, kubeflow-jupyter-web-app, kubeflow-katib, py3-pipenv, k8s-sidecar, confluent-docker-utils, mlflow, checkov,...
USN-6877-1 libreoffice vulnerability
It was discovered that LibreOffice incorrectly performed TLS certificate verification when the LibreOfficeKit library is being used by third-party components. A remote attacker could possibly use this issue to obtain sensitive information...
USN-6871-1: Linux kernel (HWE) vulnerabilities
It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to grant themselves elevated privileges on the device to execute arbitrary code, possibly with system privileges and gain access to sensitive data. Successful abuse requires the malicious party to tric...
Cross-site Scripting (XSS)
TYPO3 is vulnerable to Cross-site Scripting. The vulnerability is due to failing to properly encode user input in some backend components...
WordPress PDF Embedder Plugin <= 4.7.1 is vulnerable to Cross Site Scripting (XSS)
Software PDF Embedder Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.8.0 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7794a505b744 Credits m3ez Required...
Malicious code in ui-components-web (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3256 Malicious code in ui-components-web (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in u-workflow.components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3151 Malicious code in tpg-tc-ui-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tpg-tc-ui-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in styled-beautify-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3060 Malicious code in styled-beautify-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in linkinbio-web-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2620 Malicious code in linkinbio-web-components (npm)
--- -= Per source details. Do not edit below this line.=-...