CVE-2024-51695 WordPress Fabrica Synced Pattern Instances plugin <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yes We Work Fabrica Synced Pattern Instances fabrica-reusable-block-instances allows Reflected XSS.This issue affects Fabrica Synced Pattern Instances: from n/a through = 1.0.8...

CVE-2024-51695

CVE-2024-51695 describes a reflected XSS in Fabrica Synced Pattern Instances (Fabrica Synced Pattern Instances plugin) caused by improper input neutralization during web page generation. Affected: Fabrica Synced Pattern Instances from n/a through 1.0.8. The connected documents corroborate the vul...

CVE-2024-51695: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yes We Work Fabrica Synced Pattern Instances fabrica-reusable-block-instances allows Reflected XSS.This issue affects Fabrica Synced Pattern Instances: from n/a through = 1.0.8...

PT-2024-9218

Name of the Vulnerable Software and Affected Versions: Tuned affected versions not specified Description: A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters, and newlines c...

CVE-2024-20529

creationtimestamp| type| source ---|---|--- 2024-11-06 19:10:48+00:00| seen| https://t.me/cvedetector/10025 2024-11-07 14:20:08+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113442108664352339 2024-11-07 14:20:08+00:00| seen|...

WordPress Fabrica Synced Pattern Instances plugin <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Fabrica Synced Pattern Instances versions = 1.0.8...

WordPress Fabrica Synced Pattern Instances Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Fabrica Synced Pattern Instances Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51695 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0fa9f1896c6c Credits João Pedro S...

Malicious Package

Overview 123bla is a malicious package. This package contains malicious code and was removed from the package manager. Remediation Avoid using all malicious instances of the 123bla package...

CVE-2024-8924

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

CVE-2024-8924

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

CVE-2024-8924 Unauthenticated Blind SQL Injection in Core Platform

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

CVE-2024-8924

CVE-2024-8924 concerns ServiceNow Now Platform with an unauthenticated blind SQL injection vulnerability. The issue affects the Now Platform and could enable an attacker to extract unauthorized information. ServiceNow has deployed updates to hosted instances and provided fixes to partners and sel...

CVE-2024-8923 Sandbox Escape in Now Platform

ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided th...

CVE-2024-8923

CVE-2024-8923 affects ServiceNow Now Platform. The root cause is insufficient input validation in the platform, enabling an unauthenticated attacker to remotely execute code via a network vector. Impact is high (remote code execution, high confidentiality/integrity/availability risk). ServiceNow ...

PT-2024-9533 · Servicenow · Servicenow

Name of the Vulnerable Software and Affected Versions: ServiceNow affected versions not specified Description: The issue is related to incorrect code generation management in the Now Platform, which could enable an unauthenticated user to remotely execute code within the context of the Now...

PT-2024-9272 · Servicenow · Servicenow Now Platform

Name of the Vulnerable Software and Affected Versions: ServiceNow Now Platform affected versions not specified Description: The issue is related to a blind SQL injection vulnerability in the Now Platform, which could allow an unauthenticated user to extract unauthorized information. This...

CVE-2024-45219

Apache CloudStack CVE-2024-45219 concerns a KVM-related vulnerability where default user uploads/registrations of templates and volumes can bypass validation for KVM-compatible disks. The issue spans CloudStack versions 4.0.0–4.18.2.3 and 4.19.0.0–4.19.1.1, allowing an attacker who can upload or ...

CVE-2024-9916

creationtimestamp| type| source ---|---|--- 2024-10-13 22:16:19+00:00| seen| https://t.me/cvedetector/7789 2025-02-12 09:28:20+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/113990205373134629 2025-02-12 09:29:27+00:00| seen|...

PT-2024-7225

Name of the Vulnerable Software and Affected Versions pfsense version 2.5.2 Description A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This iss...

CVE-2024-8912

An HTTP Request Smuggling vulnerability in Looker allowed an unauthorized attacker to capture HTTP responses destined for legitimate users. There are two Looker versions that are hosted by Looker: Looker Google Cloud core was found to be vulnerable. This issue has already been mitigated and our...