CVE-2025-39419

CVE-2025-39419 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Revision Diet . Affected versions are listed as from n/a through 1.0.1 . The connected documents confirm the issue but provide no information about a published patch or fix; no exploit details or mitigations are i...

CVE-2025-39419 WordPress Revision Diet plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Miller Revision Diet revision-diet allows Stored XSS.This issue affects Revision Diet: from n/a through = 1.0.1...

CVE-2025-39419 WordPress Revision Diet plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Miller Revision Diet revision-diet allows Stored XSS.This issue affects Revision Diet: from n/a through = 1.0.1...

WordPress plugin Revision Diet 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2025-16986 · Unknown · Revision Diet

Name of the Vulnerable Software and Affected Versions: Revision Diet versions n/a through 1.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 1.0.1, update to a version that contains a fix for this issue...

Friday Squid Blogging: Beaked Whales Feed on Squid

A Travers' beaked whale Mesoplodon traversii washed ashore in New Zealand, and scientists conlcuded that "the prevalence of squid remains in its stomachs suggests that these deep-sea cephalopods form a significant part of the whale's diet, similar to other beaked whale species." Blog moderation...

MAL-2024-2152 Malicious code in down_load_ebook_carnivore_diet_by_jordan_jr_baker_pet6e (npm)

--- -= Per source details. Do not edit below this line.=-...

diet-cafe.jp Cross Site Scripting vulnerability OBB-3859568

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

diet-links.com Cross Site Scripting vulnerability OBB-3849063

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2007-10003

The CVE-2007-10003 entry concerns The Hackers Diet Plugin for WordPress (up to version 0.9.6b). The vulnerability affects the ajax_blurb.php component of the HTTP POST Request Handler, where manipulation of the user parameter leads to SQL injection. Exploitation is remote possible. Remediation is...

PT-2023-9862 · Unknown · The Hackers Diet Plugin

Name of the Vulnerable Software and Affected Versions: The Hackers Diet Plugin versions up to 0.9.6b Description: A critical issue has been found in the processing of the file ajax blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection...

WordPress Plugin Hackers Diet SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts

Scammers are taking full advantage of the launch of Google’s new TikTok competitor, YouTube Shorts, which has turned out to be an awesome tool for feeding billions of engaged viewers stolen content. That content is being used to run rackets like promoting adult dating websites, hustling diet pill...

CVE-2021-20733

Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット asken diet for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Asken Diet 输入验证错误漏洞

Asken Diet is a health and diet calorie counting app from Asken Japan. Gets the user's weight goals and health data and creates programs to help guide the user to become healthier. A security vulnerability exists in Asken Diet versions v.3.0.0 through v.4.2.x that stems from incorrect authorizati...

PT-2021-14189 · あすけんダイエット · あすけんダイエット

Name of the Vulnerable Software and Affected Versions: あすけんダイエット asken diet versions 3.0.0 through 4.2.x Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing a remote attacker to lead a user to access an arbitrary website via the vulnerable...

A week in security (December 2 – December 8)

Last week on Malwarebytes Labs, we took a look at a new version of the IcedID Trojan, described web skimmers up to no good, and took a deep dive into containerization. We also explored a report bringing bad news for organizations and insider threats, and threw a spotlight on a video game phish...

Malicious PHP Script Infects 2,400 Websites in the Past Week

A botnet dubbed Brain Food is giving webmasters indigestion with related attacks that push bogus diet pills and IQ-boosting pills via web pages hosted on legitimate sites. So far, spammers have been successful, thanks to an effective Hypertext Preprocessor PHP script also called Brain Food that h...

selah.diet Open Redirect vulnerability

Vulnerable URL: http://selah.diet/hound/s/r.php?r=https%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 2596220 VIP website status:| No Coordinat...

Information disclosure

The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...