241 matches found
WordPress Post Hit Counter Plugin <= 1.3.2 is vulnerable to Broken Access Control
Software Post Hit Counter Type Plugin Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36518 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5852c9f17a30 Credits Cat Required privilege...
WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)
Software Who Hit The Page – Hit Counter Type Plugin Vulnerable versions = 1.4.14.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25466 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 01e8a810fef2 Credits...
GHSA-2Q5C-QW9C-FMVQ Argo CD authenticated but unauthorized users may enumerate Application names via the API
Impact All versions of Argo CD starting with v0.5.0 are vulnerable to an information disclosure bug allowing unauthorized users to enumerate application names by inspecting API error messages. An attacker could use the discovered application names as the starting point of another attack. For...
hit-tuner.net Cross Site Scripting vulnerability OBB-3055494
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hit-tour.com Cross Site Scripting vulnerability OBB-3003670
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Sql injection
This Rails gem adds two methods to the ActiveRecord::Base class that allow you to update many records on a single database hit, using a case sql statement for it. Before version 0.1.3 updatebycase gem used custom sql strings, and it was not sanitized, making it vulnerable to sql injection. Upgrad...
Malicious code in never-never-hit-me (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a9245c3e2fd307ad3b3d2c20edea6894718b0ed4877c0b781efa0a297a1cd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4812 Malicious code in never-never-hit-me (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a9245c3e2fd307ad3b3d2c20edea6894718b0ed4877c0b781efa0a297a1cd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
hit-tuner.net Cross Site Scripting vulnerability OBB-2562191
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-28826
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-28586
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.267 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28568
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-28627
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.180 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28672
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.10.101 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28740
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A data-race issue exists in the dropmon net event and trace napi poll hit functions. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-28603
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to a data-race in dropmon net event and trace napi poll hit. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...
hit-parade.com Cross Site Scripting vulnerability OBB-2160694
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Missing events for critical parameter changing operations by owner
Handle 0xRajeev Vulnerability details Impact The owner of TracerPerpetualSwaps contract, who is potentially untrusted as per specification, can change the market critical parameters such as the addresses of the Liquidation/Pricing/Insurance/GasOracle/FeeReceiver and also critical values such as...
Know your enemy! The four types of cyber attackers trying to breach your security today
As business needs compel organizations to manage an ever-increasing number of database types, both on-premise and in the cloud, the threat surface has also become larger and far more difficult to manage effectively. The bad actors out there know this, too. They are constantly probing, testing, an...
