2881 matches found
vivo Game Extension Engine 安全漏洞
The vivo Game Extension Engine is a game extension engine from the Chinese company Vivo. A security vulnerability exists in vivo Game Extension Engine version 1.2.7 and earlier, which stems from the Game Extension Engine exposing some components, allowing an attacker to construct parameters for a...
PT-2024-32290 · Unknown · Game Extension Engine
Name of the Vulnerable Software and Affected Versions: Game extension engine versions 1.2.7.0 and earlier Description: The game extension engine exposes some components, allowing attackers to construct parameters for path traversal attacks. These attacks can overwrite local specific files...
WordPress Dino Game plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Dino Game versions = 1.1.0...
CVE-2024-11388
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
CVE-2024-11388
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
CVE-2024-11388
CVE-2024-11388 affects the WordPress plugin “Dino Game – Embed Google Chrome Dinosaur Game in WordPress” (
CVE-2024-11388 Dino Game – Embed Google Chrome Dinosaur Game in WordPress <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
CVE-2024-11388 Dino Game – Embed Google Chrome Dinosaur Game in WordPress <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...
WordPress Dino Game Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Dino Game Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11388 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3063a938b1ce Credits SOPROBRO Required privilege...
WordPress plugin Dino Game 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-16952 · Google · Google Chrome
Name of the Vulnerable Software and Affected Versions: The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin versions up to, and including, 1.1.0 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on...
Unwrapping the emerging Interlock ransomware attack
Cisco Talos Incident Response Talos IR recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Our analysis uncovered that the attacker used multiple components in the delivery chain including a Remote Access Tool RAT...
CVE-2024-44265
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device...
CVE-2024-44265
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device...
CVE-2024-44265
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device...
CVE-2024-44265
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device...
CVE-2024-44265
CVE-2024-44265 : The issue affects macOS where an attacker with physical access could input Game Controller events to apps running on a locked device. Apple mitigated this by restricting options offered on a locked device, with the fix delivered in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Th...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an attacker with physical access that could feed game controller events to an application...
About the security content of macOS Sequoia 15.1
About the security content of macOS Sequoia 15.1 This document describes the security content of macOS Sequoia 15.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
