4178 matches found
CVE-2023-25031
CVE-2023-25031 affects the Kiboko Labs Arigato Autoresponder and Newsletter plugin for WordPress,
CVE-2023-25031 WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1 versions...
CVE-2023-25027 WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Chained Quiz plugin = 1.3.2.5 versions...
CVE-2023-25027
CVE-2023-25027 : A stored XSS vulnerability exists in the WordPress plugin Chained Quiz (Kiboko Labs) up to version 1.3.2.5 . The issue requires admin+ authentication and is triggered via stored input in the plugin, enabling cross‑site scripting when viewed by others. The vulnerability is address...
CVE-2023-25027 WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Chained Quiz plugin = 1.3.2.5 versions...
CVE-2023-25022
CVE-2023-25022 affects the Kiboko Labs Watu Quiz WordPress plugin up to version 3.3.8. It is a Stored Cross-Site Scripting (XSS) vulnerability exploitable with admin+ privileges (authenticated). Root cause details are provided across sources: the issue is a stored XSS in the plugin that was fixed...
CVE-2023-25022 WordPress Watu Quiz Plugin <= 3.3.8 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.8 versions...
CVE-2023-25061
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1.1 versions...
CVE-2023-25061
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1.1 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1.1 versions...
CVE-2023-25061 WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1.1 versions...
CVE-2023-25061
CVE-2023-25061 affects Kiboko Labs Arigato Autoresponder and Newsletter plugin for WordPress (versions
Botnets Actively Exploited Realtek and Cacti Flaws
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Attacks surged exploiting Cacti and Realtek vulnerabilities, resulting in the spread of ShellBot and Moobot malware. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn...
PT-2023-19906 · Kiboko · Kiboko Labs Arigato Autoresponder/Newsletter
Name of the Vulnerable Software and Affected Versions: Kiboko Labs Arigato Autoresponder and Newsletter plugin versions = 2.7.1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to inject malicious scripts into the...
PT-2023-19877 · Kiboko · Kiboko Labs Chained Quiz Plugin
Name of the Vulnerable Software and Affected Versions: Kiboko Labs Chained Quiz plugin versions prior to 1.3.2.6 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 1.3.2.6...
SiLabs Z-Wave over IP Gateway 缓冲区错误漏洞
The SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway. No information about this vulnerability is available at this...
PT-2023-19882 · Kiboko · Kiboko Labs Arigato Autoresponder/Newsletter
Name of the Vulnerable Software and Affected Versions: Kiboko Labs Arigato Autoresponder and Newsletter plugin versions = 2.7.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject...
PT-2023-19873 · Kiboko · Watu Quiz
Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz plugin versions prior to 3.3.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions prior to...