Event Monster < 1.2.1 - Admin+ SQLi

The plugin does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users PoC...

Event Monster < 1.2.1 - Admin+ SQLi

The plugin does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by high privilege users...

WordPress Event Monster plugin <= 1.1.20 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Visitors Deletion discovered by Thura Moe Myint in the WordPress Event Monster plugin versions = 1.1.20. Solution Update the WordPress Event Management Tickets Booking plugin to the latest available version at least 1.2.0...

WordPress Event Monster plugin <= 1.2.0 - Auth. SQL Injection (SQLi) vulnerability

Auth. SQL Injection SQLi vulnerability discovered by Thura Moe Myint in the WordPress Event Monster plugin versions = 1.2.0. Solution Update the WordPress Event Management Tickets Booking plugin to the latest available version at least 1.2.1...

Ransomware updates & 1-day exploits

Introduction In our crimeware reporting service, we analyze the latest crime-related trends we come across. Last month, we again posted a lot on ransomware, but we also covered other subjects, such as 1-day exploits. In this blogpost, we provide excerpts from these reports. For questions or more...

PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs credentials used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the network Crawls shared drives in th...

[SECURITY] Fedora 31 Update: crawl-0.24.1-2.fc31

This is the Console ncurses version of crawl. Dungeon Crawl Stone Soup is a free roguelike game of exploration and treasure-hunting in dungeons filled with dangerous and unfriendly monsters in a quest for the mystifyingly fabulous Orb of Zot. Dungeon Crawl Stone Soup has diverse species and many...

WordPress Google Analytics by Monster Insights plugin <= 7.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by RIPS Technologies in WordPress Google Analytics by Monster Insights plugin versions = 7.1.0. Solution Update the WordPress Google Analytics by Monster Insights plugin to the latest available version at least 7.2.0...

Google Analytics by Monster Insights <= 7.1.0 - Authenticated Stored Cross-Site Scripting (XSS)

The Google Analytics Dashboard Plugin for WordPress by MonsterInsights WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

monster-hunter-x.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-645805 Description| Value ---|--- Affected Website:| monster-hunter-x.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

monster.com.my XSS vulnerability

Open Bug Bounty ID: OBB-608338 Description| Value ---|--- Affected Website:| monster.com.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

my.monsterindia.com XSS vulnerability

Open Bug Bounty ID: OBB-568248 Description| Value ---|--- Affected Website:| my.monsterindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

recruiter.monsterindia.com XSS vulnerability

Open Bug Bounty ID: OBB-568246 Description| Value ---|--- Affected Website:| recruiter.monsterindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

monstertruckdriverjobs.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562682 Description| Value ---|--- Affected Website:| monstertruckdriverjobs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2012-6671

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

FS Monster Clone SQL Injection Vulnerability

FS Monster Clone is a PHP and MySQL based online job search and recruitment website script. A SQL injection vulnerability exists in FS Monster Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the EmployerDetails.php...

CVE-2017-17585

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

CVE-2017-17585

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

Sql injection

FS Monster Clone 1.0 has SQL Injection via the EmployerDetails.php id parameter...

CVE-2017-17585

FS Monster Clone 1.0 is affected by an SQL injection in Employer_Details.php (id parameter). Root cause: user-controlled input used in SQL query leading to potential data disclosure/modification; CVSS base scores indicate HIGH to CRITICAL severity. Known exploits exist (e.g., exploit-db link) and...