2672 matches found
WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection
Software Posts and Users Stats Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-44738 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID adb9c8d12136 Credits Mika Required privilege Subscriber Publishe...
WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
Software Multi Rating Type Plugin Vulnerable versions = 5.0.5 Fixed in 5.0.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47443 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1dcbbd6b8544 Credits rezaduty Required...
cityofnewcastle.net Cross Site Scripting vulnerability OBB-3175286
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
basketjicin.cz Cross Site Scripting vulnerability OBB-3175028
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0613
creationtimestamp| type| source ---|---|--- 2023-02-01 16:14:12+00:00| seen| https://t.me/cibsecurity/57291...
K000130496: Overview of F5 vulnerabilities (February 2023)
Security Advisory Description On February 1, 2023, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associate...
CVE-2022-32984
creationtimestamp| type| source ---|---|--- 2023-02-01 00:13:31+00:00| seen| https://t.me/cibsecurity/57233...
Fixed in Apache Tomcat 9.0.71
Important: Apache Tomcat denial of service CVE-2023-24998 Apache Tomcat uses a packaged renamed copy of Apache Commons FileUpload to provide the file upload functionality defined in the Jakarta Servlet specification. Apache Tomcat was, therefore, also vulnerable to the Apache Commons FileUpload...
CVE-2023-21752
creationtimestamp| type| source ---|---|--- 2023-01-12 06:15:30+00:00| seen| https://t.me/proxybar/1284 2023-01-12 06:49:19+00:00| published-proof-of-concept| https://t.me/CNArsenal/393 2023-01-13 11:05:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7538 2023-01-13...
Friday Squid Blogging: Squid in Concert
Squid is performing a concert in London in February. If you dont know what their music is like, try this or this or this. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...
CVE-2020-25736
creationtimestamp| type| source ---|---|--- 2022-12-13 18:16:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/acronistrueimagexpcprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:26+00:00|...
PT-2022-20160 · Tinymce +1 · Tinymce +1
Name of the Vulnerable Software and Affected Versions: asith-eranga ISIC tour booking versions through the version published on Feb 13th 2018 Description: The issue allows attackers to upload arbitrary files via "/system/application/libs/js/tinymce/plugins/filemanager/dialog.php" and...
CVE-2021-42847
creationtimestamp| type| source ---|---|--- 2022-11-09 06:35:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6968 2023-05-08 18:49:17+00:00| seen|...
CVE-2013-2566
creationtimestamp| type| source ---|---|--- 2022-11-07 22:22:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/sslversion.rb 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen|...
CVE-2022-22242
creationtimestamp| type| source ---|---|--- 2022-10-31 12:02:57+00:00| seen| https://t.me/truesecator/3640 2022-11-02 17:55:41+00:00| seen| https://t.me/icscert/641 2022-11-03 05:16:50+00:00| seen| https://t.me/CyberSecurityTechnologies/7082 2022-11-07 07:48:02+00:00| published-proof-of-concept|...
167,000 stolen credit card numbers Exposed via PoS Malware
By Waqas The campaign was discovered in April 2022, but researchers believe the campaign occurred between February 2021 and September 8, 2022. This is a post from HackRead.com Read the original post: 167,000 stolen credit card numbers Exposed via PoS Malware...
Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Advanced/Enterprise for the Oracle CPU February 2013.
Abstract The IBM WebSphere Partner Gateway is shipped with an IBM Java SDK that is based on the Oracle SDK. The February 2013 Oracle Critical Patch Updates CPU contained various security vulnerability fixes for the Oracle JDKs. The IBM Java SDK that WebSphere Partner Gateway ship is similarly...
CVE-2022-35413
creationtimestamp| type| source ---|---|--- 2022-09-14 02:25:57+00:00| seen| https://t.me/cibsecurity/49750 2024-01-15 10:01:13+00:00| seen| https://t.me/arpsyndicate/2777 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-03...
CVE-2022-36553
creationtimestamp| type| source ---|---|--- 2022-08-30 02:47:45+00:00| seen| https://t.me/cibsecurity/49016 2024-01-13 04:11:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9771 2024-01-13 08:07:57+00:00| published-proof-of-concept| https://t.me/cKure/12202 2024-08-16...
