Lucene search
+L

249 matches found

Talos Blog
Talos Blog
added 2024/03/21 6:0 p.m.22 views

“Pig butchering” is an evolution of a social engineering tactic we’ve seen for years

Whether you want to call them "catfishing," "pig butchering" or just good old-fashioned "social engineering," romance scams have been around forever. I was first introduced to them through the MTV show "Catfish," but recently they seem to be making headlines as the term "pig butchering" enters th...

8.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2024/02/20 6:43 a.m.8 views

love-rugby.com Cross Site Scripting vulnerability OBB-3855257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
NVD
NVD
added 2023/12/20 4:15 p.m.27 views

CVE-2023-49772

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

10CVSS0.00727EPSS
Exploits0References1
OSV
OSV
added 2023/12/20 4:15 p.m.5 views

CVE-2023-49772

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

9.8CVSS5.8AI score0.00727EPSS
Exploits0References1
Prion
Prion
added 2023/12/20 4:15 p.m.24 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

7.5CVSS7.1AI score0.00727EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/20 3:21 p.m.8 views

CVE-2023-49772 WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

10CVSS9.5AI score0.00727EPSS
Exploits0References1
CVE
CVE
added 2023/12/20 3:21 p.m.86 views

CVE-2023-49772

CVE-2023-49772 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin Genesis Simple Love (Phpbits Creative Studio), affecting versions n/a through 2.0. Connected sources identify the root cause as unauthenticated PHP Object Injection via deserialization of untrusted ...

10CVSS8.6AI score0.00727EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/20 3:21 p.m.38 views

CVE-2023-49772 WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0...

10CVSS9.7AI score0.00727EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/20 12:0 a.m.7 views

WordPress Plugin Genesis Simple Love Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS6.8AI score0.00727EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.8 views

PT-2023-31342 · Unknown · Genesis Simple Love

Name of the Vulnerable Software and Affected Versions: Genesis Simple Love versions n/a through 2.0 Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security issues when untrusted data is processed by the application. No information is...

10CVSS9.4AI score0.00727EPSS
Exploits0References6
OSV
OSV
added 2023/12/13 3:15 p.m.5 views

CVE-2023-6759

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely...

7.5CVSS4.9AI score0.00969EPSS
Exploits1References3
Prion
Prion
added 2023/12/13 3:15 p.m.21 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely...

5CVSS7.1AI score0.00969EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/13 3:0 p.m.34 views

CVE-2023-6759 Thecosy IceCMS Love resource improper enforcement of a single, unique action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely...

5.3CVSS7.8AI score0.00969EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/12/13 3:0 p.m.13 views

CVE-2023-6759 Thecosy IceCMS Love resource improper enforcement of a single, unique action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to initiate the attack remotely...

5.3CVSS7.1AI score0.00969EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.6 views

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1, which originates from the presence of an unknown part of /WebResource/resource in the Love Handler component...

7.5CVSS6.7AI score0.00969EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/12/13 12:0 a.m.6 views

PT-2023-32762 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability has been found in Thecosy IceCMS, affecting an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single,...

7.5CVSS5.6AI score0.00969EPSS
Exploits1References8
Patchstack
Patchstack
added 2023/12/05 12:0 a.m.13 views

WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection

Software Genesis Simple Love Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-49772 Patch priority High CVSS severity High 10 Developer Claim ownership PSID fa51f08cd8a2 Credits Rafie Muhammad Patchstack Required...

10CVSS6.8AI score0.00727EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/11/13 4:15 p.m.18 views

CVE-2023-6099

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

9.8CVSS0.00921EPSS
Exploits0References3
Prion
Prion
added 2023/11/13 4:15 p.m.23 views

Design/Logic Flaw

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

7.5CVSS7AI score0.00921EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/11/13 3:31 p.m.23 views

CVE-2023-6099 Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

7.5CVSS9.8AI score0.00921EPSS
Exploits0References3
Rows per page
Query Builder