Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

Description The plugin does not prevent users with at least the contributor role from rendering sensitive shortcodes, allowing them to generate, and leak, valid password reset URLs, which they can use to take over any accounts. PoC 1. ADMIN: Install Formidable Pro plugin 2. ADMIN: Install...

CVE-2024-25407

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to terminate other transactions...

CVE-2024-25407

SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to terminate other transactions...

CVE-2022-22506

IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. IBM X-Force ID: 227293...

Design/Logic Flaw

IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. IBM X-Force ID: 227293...

CVE-2022-22506

CVE-2022-22506 affects IBM Robotic Process Automation (RPA) 21.0.2 (and related deploys). The vulnerability could allow user IDs to be exposed across tenants, impacting confidentiality. The IBM Security Bulletin lists affected products/versions and provides remediation: upgrade to 21.0.2 IF002 or...

IBM Robotic Process Automation Information Disclosure Vulnerability

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an information disclosure vulnerabili...

CVE-2024-25003

creationtimestamp| type| source ---|---|--- 2024-02-09 08:21:53+00:00| seen| https://t.me/ctinow/181862 2024-02-11 15:49:09+00:00| seen| https://t.me/arpsyndicate/3429 2024-02-14 08:57:00+00:00| seen| https://t.me/ctinow/184479 2024-02-14 17:16:44+00:00| seen| https://t.me/ctinow/184829 2024-03-0...

CVE-2023-27001

creationtimestamp| type| source ---|---|--- 2024-02-08 23:32:06+00:00| seen| https://t.me/ctinow/181699 2024-02-15 19:17:09+00:00| seen| https://t.me/ctinow/185798 2024-03-02 15:46:14+00:00| seen| https://t.me/ctinow/198395...

CVE-2024-24014

creationtimestamp| type| source ---|---|--- 2024-02-08 03:31:44+00:00| seen| https://t.me/ctinow/181135 2024-03-02 08:07:10+00:00| seen| https://t.me/ctinow/198260...

KLA63866 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service. 2...

CVE-2023-43535

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...

Memory corruption

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...

CVE-2023-43535

CVE-2023-43535 describes memory corruption when negative display IDs are input while processing the DISPLAYESCAPE event trigger. The NVD entry indicates high impact (confidentiality, integrity, availability) with local attack vector and low attack complexity; privileges required: low; user intera...

CVE-2024-22523

creationtimestamp| type| source ---|---|--- 2024-01-30 10:31:50+00:00| seen| https://t.me/ctinow/175821 2024-02-05 21:16:45+00:00| seen| https://t.me/ctinow/179502 2024-02-22 06:37:06+00:00| seen| https://t.me/ctinow/190462...

Privacy predictions for 2024

In our previous privacy predictions piece, we outlined trends for 2023. As expected, there was a notable increase in the adoption of digital IDs to replace paper documents. For example, California expanded a pilot program for digital drivers licenses, and Russia introduced laws enabling...

Low: containerd

Issue Overview: No CVE associated with this advisory Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories...

About the security content of watchOS 10.3

About the security content of watchOS 10.3 This document describes the security content of watchOS 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of tvOS 17.3

About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iOS 16.7.5 and iPadOS 16.7.5

About the security content of iOS 16.7.5 and iPadOS 16.7.5 This document describes the security content of iOS 16.7.5 and iPadOS 16.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...