Lucene search
K

11235 matches found

The Hacker News
The Hacker News
added 2024/11/08 11:53 a.m.26 views

The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

We've all heard a million times: growing demand for robust cybersecurity in the face of rising cyber threats is undeniable. Globally small and medium-sized businesses SMBs are increasingly targeted by cyberattacks but often lack the resources for full-time Chief Information Security Officers CISO...

7.2AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2024/11/07 2:0 p.m.5 views

Cathal O’Neill - Taking Command of Your Career in Tech

Cathal O’Neill joined Rapid7 in 2023 as a Senior Engineering Manager, and he has since advanced to the role of Engineering Director. Reflecting on his career path, he says,“My journey into senior management has been a continual evolution, driven by both personal development and the desire to lead...

7.2AI score
Exploits0
OSV
OSV
added 2024/11/04 3:15 p.m.1 views

CVE-2024-51677

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WebberZone Knowledge Base allows Stored XSS.This issue affects Knowledge Base: from n/a through 2.2.0...

5.4CVSS5.8AI score0.00233EPSS
Exploits0References1
NVD
NVD
added 2024/11/04 3:15 p.m.7 views

CVE-2024-51677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through = 2.2.0...

6.5CVSS0.00233EPSS
Exploits0References1
CVE
CVE
added 2024/11/04 2:16 p.m.52 views

CVE-2024-51677

CVE-2024-51677 affects the Knowledge Base WordPress plugin (

6.5CVSS5.9AI score0.00233EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/04 2:16 p.m.20 views

CVE-2024-51677 WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through = 2.2.0...

6.5CVSS0.00233EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/04 2:16 p.m.9 views

CVE-2024-51677 WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through = 2.2.0...

6.5CVSS5.9AI score0.00233EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.2 views

PT-2024-34822 · Unknown · Webberzone Knowledge Base

Name of the Vulnerable Software and Affected Versions: WebberZone Knowledge Base versions prior to 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: F...

6.5CVSS5.8AI score0.00233EPSS
Exploits0References7
Patchstack
Patchstack
added 2024/11/01 1:0 p.m.2 views

WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Knowledge Base versions = 2.2.0...

6.5CVSS6AI score0.00233EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/01 12:0 a.m.11 views

WordPress Knowledge Base Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Knowledge Base Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51677 Patch priority Low CVSS severity Low 6.5 Developer WebberZone PSID db1f7c220589 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.6AI score0.00233EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/23 10:42 a.m.27 views

Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog On Cloud Pak for Data

Summary Lineage component is an internal component of IBM Knowledge Catalog On Cloud Pak for Data. Vulnerabilities in Java are affecting Lineage component of IBM Cloud Pak for Data. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-21145 DESCRIPTION: An unspecified...

4.8CVSS6.5AI score0.01056EPSS
Exploits0Affected Software1
OSV
OSV
added 2024/10/21 8:15 p.m.1 views

CVE-2024-46326

Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function...

6.1CVSS5.8AI score0.00446EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.2 views

PT-2024-31956 · Public Knowledge · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: Public Knowledge Project pkp-lib versions 3.4.0-7 and earlier Description: The issue is related to an Open redirect vulnerability due to a lack of input sanitization in the logout function. Recommendations: For Public Knowledge Project pkp-li...

6.1CVSS6.9AI score0.00446EPSS
Exploits0References5
CVE
CVE
added 2024/10/21 12:0 a.m.44 views

CVE-2024-46326

CVE-2024-46326 affects Public Knowledge Project pkp-lib up to version 3.4.0-7. The issue is an open redirect caused by a lack of input sanitization in the logout function (vulnerability in the logout flow). Connected documents confirm the affected family and versions; explicit exploitation detail...

6.1CVSS6.9AI score0.00446EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/21 12:0 a.m.24 views

CVE-2024-46326

Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function...

0.00446EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/10/21 12:0 a.m.10 views

CVE-2024-46326

Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function...

7AI score0.00446EPSS
Exploits0References3
Talos Blog
Talos Blog
added 2024/10/10 6:0 p.m.31 views

What NIST’s latest password standards mean, and why the old ones weren’t working

Say goodbye to the days of using the "@" symbol to mean "a" in your password or replacing an "S" with a "$." The U.S. National Institute of Standards and Technology NIST recently announced new guidelines for the ways website and organizations should handle password creation and management that wi...

8.1CVSS9.9AI score0.60954EPSS
Exploits0
Citrix
Citrix
added 2024/10/09 12:0 a.m.9 views

Citrix Virtual Apps and Desktops: Session Launch Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with session launch in Citrix Virtual Apps and Desktops. Overview of the Issue The process of session launch in Citrix Virtual Apps and Desktops is depende...

7.2AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:0 p.m.118 views

2024-10 Cumulative Update for Windows 11 for x64-based Systems (KB5044280)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:0 p.m.8 views

2024-10 Cumulative Update for Windows 11 for ARM64-based Systems (KB5044280)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
Exploits0
Rows per page
Query Builder