CVE-2023-6830

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected...

CVE-2023-6830: Improper Neutralization of Input During Web Page Generation

The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated users to inject arbitrary HTML code into form fields. When the form data is viewed by an administrator in the Entries View Page, the injected...

GHSA-8959-RFXH-R4J4

creationtimestamp| type| source ---|---|--- 2024-01-08 17:46:35+00:00| seen| https://t.me/ctinow/164521 2024-01-25 19:16:46+00:00| seen| https://t.me/ctinow/173716...

DEBIAN-CVE-2023-34436

An out-of-bounds write vulnerability exists in the LXT2 numtimetableentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

UBUNTU-CVE-2023-34436

An out-of-bounds write vulnerability exists in the LXT2 numtimetableentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

PT-2024-12482 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: A vulnerability exists in the LXT2 num time table entries functionality, allowing for an out-of-bounds write. This can be triggered by a specially crafted .lxt2 file, potentially leading to arbitrary code...

PT-2024-12801 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to multiple integer overflow vulnerabilities in the LXT2 num dict entries functionality. A specially crafted .lxt2 file can cause arbitrary code execution when opened by a victim. The...

PT-2024-15103 · WordPress · Formidable Forms

Name of the Vulnerable Software and Affected Versions: Formidable Forms plugin for WordPress versions up to, and including, 6.7 Description: The Formidable Forms plugin for WordPress is vulnerable to HTML injection. This issue allows unauthenticated users to inject arbitrary HTML code into form...

CVE-2024-22047

A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user...

CVE-2024-22047

The CVE-2024-22047 issue concerns the Ruby gem Audited (versions 4.0.0 through 5.3.3) where a race condition can cause audit log entries to be attributed to the wrong user. Connected Red Hat advisory RHSA-2024:2010 notes the same race condition affecting rubygem-audited and highlights risk of mis...

CVE-2024-22047 Audited Log Integrity Errors Due to Race Condition

A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user...

RHSA-2023:7884

creationtimestamp| type| source ---|---|--- 2024-01-02 17:17:28+00:00| seen| https://t.me/ctinow/161895...

CVE-2023-7079

creationtimestamp| type| source ---|---|--- 2023-12-29 13:27:16+00:00| seen| https://t.me/ctinow/160510 2023-12-30 01:39:57+00:00| seen| https://t.me/cibsecurity/73965 2024-01-21 14:14:22+00:00| seen| https://t.me/ctinow/170836...

CVE-2023-31302

creationtimestamp| type| source ---|---|--- 2023-12-29 07:26:45+00:00| seen| https://t.me/ctinow/160358 2023-12-30 01:34:56+00:00| seen| https://t.me/cibsecurity/73904 2024-01-20 20:46:21+00:00| seen| https://t.me/ctinow/170718...

CVE-2023-51433

creationtimestamp| type| source ---|---|--- 2023-12-29 05:26:58+00:00| seen| https://t.me/ctinow/160336 2023-12-30 01:33:52+00:00| seen| https://t.me/cibsecurity/73891 2024-01-20 17:21:42+00:00| seen| https://t.me/ctinow/170677...

CVE-2023-7096

creationtimestamp| type| source ---|---|--- 2023-12-25 02:26:20+00:00| seen| https://t.me/ctinow/159115 2023-12-30 08:16:13+00:00| seen| https://t.me/ctinow/160784...

CVE-2023-7038

creationtimestamp| type| source ---|---|--- 2023-12-21 19:26:32+00:00| seen| https://t.me/ctinow/157901 2023-12-29 08:16:45+00:00| seen| https://t.me/ctinow/160374 2024-01-14 09:36:39+00:00| seen| https://t.me/ctinow/167976...

addRewardToken() does note remove old entries before adding new ones

Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...

addRewardToken() does note remove old entries before adding new ones

Lines of code 455, 280, 378, 411 Vulnerability details Each time addRewardToken is called, new entries are added to the array, but doing so does not remove any old entries. By calling the function multiple times, an attacker can can increase their voting power indefinitely, without having to...

CVE-2023-4220

creationtimestamp| type| source ---|---|--- 2023-12-17 14:43:03+00:00| seen| https://t.me/ctinow/155617 2024-07-08 07:34:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7908 2024-07-11 07:29:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7942 2024-07-29...