CVE-2024-53459: Improper Neutralization of Input During Web Page Generation

Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting XSS via the /scgi?sid parameter...

PT-2024-35825 · Unknown · Multi Feed Reader

Name of the Vulnerable Software and Affected Versions: Multi Feed Reader versions prior to 2.2.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

Sysax Multi Server security vulnerabilities

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows systems from Codeorigin, USA. A security vulnerability exists in Sysax Multi Server version 6.99 that stems from the presence of a cross-site scripting XSS attack via the /scgi?sid parameter...

CVE-2024-33053: Use After Free

Memory corruption when multiple threads try to unregister the CVP buffer at the same time...

CVE-2024-53459

Codeorigin Sysax Multi Server version 6.99 is vulnerable to a Cross-Site Scripting (XSS) attack. The vulnerability is caused by the improper neutralization of input during web page generation specifically via the /scgi?sid parameter. Impacted software is described as an FTP and Shell server for W...

CVE-2024-53459

Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting XSS via the /scgi?sid parameter...

CVE-2024-53459

Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting XSS via the /scgi?sid parameter...

WordPress plugin Multi Feed Reader has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

[SECURITY] Fedora 40 Update: qbittorrent-5.0.2-1.fc40

A Bittorrent client using rblibtorrent and a Qt6 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...

Phishing-as-a-Service "Rockstar 2FA" Targets Microsoft 365 Users with AiTM Attacks

Cybersecurity researchers are warning about malicious email campaigns leveraging a phishing-as-a-service PhaaS toolkit called Rockstar 2FA with an aim to steal Microsoft 365 account credentials. "This campaign employs an AitM adversary-in-the-middle attack, allowing attackers to intercept user...

GO-2024-3288 Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws in github.com/taurusgroup/multi-party-sig

Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws in github.com/taurusgroup/multi-party-sig...

Latest Multi-Stage Attack Scenarios with Real-World Examples

Multi-stage cyber attacks, characterized by their complex execution chains, are designed to avoid detection and trick victims into a false sense of security. Knowing how they operate is the first step to building a solid defense strategy against them. Let's examine real-world examples of some of...

Malware in multi-module-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webpack-support-multi-domain-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Hacker in Snowflake Extortions May Be a U.S. Soldier

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake , but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's...

Malicious code in multi-module-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39776c52c5a6a5c6f0a98f7fe10de67a9df1af23b6ee9f5015566a8bb718837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in multi-module-framework

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-10988 Malicious code in multi-module-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39776c52c5a6a5c6f0a98f7fe10de67a9df1af23b6ee9f5015566a8bb718837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: blk-mq: fix IO hang from sbitmap wakeup race

A possible IO hang from sbitmap wakeup race was found in the Linux kernel. This may lead to compromised Availability...

kernel: mptcp: pm: Fix uaf in __timer_delete_sync

A use-after-free flaw was found in the Linux kernel’s Multipath TCP MPTCP subsystem. This flaw allows a local user to crash or potentially escalate their privileges on the system...