Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Operations Monitor, which could be exploit...

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Operations Monitor, which could be exploit...

WordPress Download Monitor Plugin < 4.4.7 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Ukraine government entities targeted by a destructive malware “Whispergate”

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. A malware attack was carried out on Ukraine government, non-profit, and IT entities with a wiper disguised as ransomware. The threat actor, DEV-0586 targeted government bodies that provide critical executive branch or emergen...

CVE-2021-36920

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress plugin Download Monitor versions = 4.4.6...

CVE-2021-36920

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress plugin Download Monitor versions = 4.4.6...

Cross site scripting

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress plugin Download Monitor versions = 4.4.6...

CVE-2021-36920 WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress plugin Download Monitor versions = 4.4.6...

CVE-2021-36920

CVE-2021-36920 affects the WordPress plugin Download Monitor (versions

CVE-2021-36920 WordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress plugin Download Monitor versions = 4.4.6...

WordPress plugin 跨站脚本漏洞

WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in WordPress plugin, which stems from an authenticated Reflected Cross-Site Scripting XSS vulnerability discovered in the WordPress Plugin Download Monitor version = 4.4.6...

Download Monitor < 4.4.7 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting issues...

GitLab 信息泄露漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. There is an information disclosure vulnerability in GitLab, no more informatio...

SAP Enterprise Threat Detection 跨站脚本漏洞

SAP Enterprise Threat Detection is a cyber threat detection system for enterprise environments from SAP Germany. The application identifies, analyzes, and eliminates cyberattacks as they occur and before serious damage occurs. There is a security vulnerability in SAP Enterprise Threat Detection, ...

Oracle MySQL Enterprise Monitor Installed (macOS)

Binary data macosxmysqlenterprisemonitorinstalled.nbin...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-45105, CVE-2021-44832)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

WordPress Download Monitor PluginSQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress Download Monitor Plugin has a SQL injection vulnerability in versions prior to 4.4.5, which stems from the use...

[R1] Nessus Network Monitor 6.0.0 Fixes Multiple Third-party Vulnerabilities

R1 Nessus Network Monitor 6.0.0 Fixes Multiple Third-party Vulnerabilities Arnie Cabral Wed, 01/05/2022 - 18:19 Nessus Network Monitor leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updat...

CVE-2021-24786

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue...

CVE-2021-24786

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue...