354 matches found
Stubborn WooCommerce Plugin Bugs Gets Third Patch
E-commerce sites using the WordPress plugin Discount Rules for WooCommerce are being urged to patch two high-severity cross-site scripting flaws that could allow an attacker to hijack a targeted site. Two fixes for the flaws, first available on Aug. 22 and second on Sept. 2, failed to patch the...
Discount Rules for WooCommerce < 2.2.1 - Multiple Authorization Bypass
On August 20th 2020 WebARX disclosed multiple vulnerabilities affecting the Discount Rules for WooCommerce WordPress plugin, which were patched in version 2.1.0 see references. Some time after, the Wordfence Threat Intelligence Team discovered several additional authorization bypass vulnerabiliti...
Discount Rules for WooCommerce < 2.1.0 - Multiple Vulnerabilities
The Discount Rules for WooCommerce plugin versions below 2.1.0 suffers from multiple vulnerabilities such as SQL injection, authorization issues and unauthenticated stored cross-site scripting. The issues in this plugin are caused due to a lack of authorization and nonce token check. The plugin...
WordPress Discount Rules for WooCommerce plugin <= 2.0.2 - Multiple (XSS, SQLi) Vulnerabilities
Multiple XSS, SQLi Vulnerabilities found by WebARX Security in WordPress Discount Rules for WooCommerce plugin versions = 2.0.2. Solution Update the WordPress Discount Rules for WooCommerce plugin to the latest available version at least 2.1.0...
Learn Machine Learning and AI – Online Training Program @ 93% OFF
Within the next decade, artificial intelligence is likely to play a significant role in our everyday lives. Machine learning already powers image recognition, self-driving cars, and Netflix recommendations. For any aspiring developer, learning how to code smart software is a good move. These skil...
Learn Machine Learning and AI – Online Training Program @ 93% OFF
Within the next decade, artificial intelligence is likely to play a significant role in our everyday lives. Machine learning already powers image recognition, self-driving cars, and Netflix recommendations. For any aspiring developer, learning how to code smart software is a good move. These skil...
CompTIA Certification Prep Courses – Get Lifetime Access @ 98% Discount
In the world of professional IT, recruiters look for certificates as an important criterion for eligibility and assessing skills. Any IT professional with résumé that includes CompTIA certificates tends to rise up the pile. Of course, there are many different CompTIA exams you can choose from bas...
hamiltondiscountwine.com Cross Site Scripting vulnerability OBB-1208269
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Hackers Created Thousands of Coronavirus (COVID-19) Related Sites As Bait
As the world comes to grips with the coronavirus pandemic, the situation has proven to be a blessing in disguise for threat actors, who've taken advantage of the opportunity to target victims with scams or malware campaigns. Now, according to a new report published by Check Point Research today a...
Zomato: Mathematical error found in meals for one
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out th Wrong calculation is done by the...
Deal: Cloud And Networking Certification Training ~ Get 97% OFF
Cloud computing and networking are two of the most significant areas of growth in the IT business. Companies need engineers who can maintain distributed software and keep the company connected. If you want to work in either niche, the Essential Cloud & Networking Certification Training Bundle...
discount-drugmart.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1007717 Security Researcher geeknik Helped patch 8826 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting discount-drugmart.com...
Learn Ethical Hacking Online – A to Z Training Bundle 2019
Good news for you is that this week's THN Deals brings Ethical Hacking A to Z Bundle that let you get started regardless of your experience level. The Ethical Hacking A to Z Bundle will walk you through the very basic skills you need to start your journey towards becoming a professional ethical...
Learn Ethical Hacking Online – A to Z Training Bundle 2019
Good news for you is that this week's THN Deals brings Ethical Hacking A to Z Bundle that let you get started regardless of your experience level. The Ethical Hacking A to Z Bundle will walk you through the very basic skills you need to start your journey towards becoming a professional ethical...
FEC: Campaigns Can Use Discounted Cybersecurity Services
The U.S. Federal Election Commission FEC said today political campaigns can accept discounted cybersecurity services from companies without running afoul of existing campaign finance laws, provided those companies already do the same for other non-political entities. The decision comes amid much...
CompTIA Certification Training — Get Online Courses @ 95% OFF
The Information Technology industry has seen exponential growth over the years. It is essential for everyone to earn cybersecurity certification if you want to be a part of this growing industry. Organizations always prefer employees with strong internationally-recognized professional...
CVE-2018-11468
The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...
CVE-2018-11504
The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...
CVE-2018-11503
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...
Visit Wallarm at Google Cloud Next
April 9–11, San Francisco, CA We are excited to join the community of the GCP professionals and demonstrate Wallarm web and API protection solutions custom-built for Google Cloud-powered applications. A certified GCP-partner, Wallarm delivers AI-powered security solution built to help your busine...