CVE-2021-24785

CVE-2021-24785 affects the WordPress plugin Great Quotes (versions ≤ 1.0.0). The vulnerability is a stored Cross-Site Scripting (XSS) in the Quote and Author fields, arising from failure to sanitize/escape input. Public references describe that high-privilege users could perform XSS even with unf...

CVE-2021-24785 Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin The Great Quotes 1.0.0 and...

just-great-software.com Cross Site Scripting vulnerability OBB-2152274

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress Great Quotes plugin <= 1.0.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Vishal Mohan in WordPress Great Quotes plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of September 24, 2021 and is not available for download. This closure is temporary, pending a full review...

Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. Add/edit a Quote and put the following payload in the "Quote" and "Author" fields:...

Behind the scenes with the head of Kaspersky’s GReAT

Costin Raiu has been with Kaspersky since 2000, initially as the Chief Security Expert overseeing research efforts in the EEMEA region. In 2010, he became Director of our Global Research and Analysis Team GReAT. During his tenure at Kaspersky, he has spearheaded the companys research on some of t...

It's Official - Akamai is a Great Place to Work

When Akamai Costa Rica won the 'Great Place to Work' award, we were delighted. It's a wonderful achievement that really means a lot to Akamai and to all the collaborators who have worked here. It highlights the great working environment that Akamai have created for us. But it also shines a light ...

APT10: sophisticated multi-layered loader Ecipekac discovered in A41APT campaign

Why is the campaign called A41APT? In 2019, we observed an APT campaign targeting multiple industries, including the Japanese manufacturing industry and its overseas operations, that was designed to steal information. We named the campaign A41APT not APT41 which is derived from the host name...

Logic Flaw Vulnerability in Large Practice Series Instructional Management System (CNVD-2021-21598)

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw vulnerability exists in the Great Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Great Intelligence Fire Protection Digital Monitoring Center Platform

Great Wisdom Fire Digital Monitoring Center Platform is a fire IOT remote monitoring system, which is applicable to the smart fire platform under the new smart city, suitable for city networking, industry networking, large enterprise networking and remote unattended places. There is a SQL injecti...

WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware

Google on Thursday removed The Great Suspender , a popular Chrome extension used by millions of users, from its Chrome Web Store for containing malware. It also took the unusual step of deactivating it from users' computers. "This extension contains malware," read a terse notification from Google...

Pwndoc - Pentest Report Generator

PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Vulnerabilitie...

greatindianrecipes.com Cross Site Scripting vulnerability OBB-1379466

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

greatwallgroup.com.hk Cross Site Scripting vulnerability OBB-1281409

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

APT trends report Q2 2020

For more than three years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and...

GReAT thoughts: Awesome IDA Pro plugins

The Global Research & Analysis Team here at Kaspersky has a tradition of meeting up once a month and sharing cutting-edge research, interesting techniques and useful tools. We recently took the unprecedented decision to make our internal meetings public for a few months and present them as a seri...

Logic Flaw Vulnerability in the Great Practice Series Teaching Management System of Kok Jin Information Technology Ltd.

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw exists in the GJIT Large Practice Series Teaching Management System, which can be exploited by an attacker to reset any user's password...

Build in the Cloud with Confidence

The AWS Well-Architected Framework provides a consistent approach to building cloud architectures. Learn how to leverage consistent best practices and guidance for your architecture so you can focus on building great solutions in the cloud...

Unauthorized access vulnerability in the website building system of Hebei Tangshan Great Wall Network Co.

Great Wall Network Information Studio focuses on providing professional Internet services, mainly serving domestic small and medium-sized enterprises. Hebei Tangshan Great Wall Network Co., Ltd. building system has unauthorized access vulnerability, attackers can use the vulnerability to view and...