sv-zwerg-new-hampshire.de Cross Site Scripting vulnerability OBB-2693831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE-SU-2022:2196-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-22316 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.38.1 Description: An issue in MediaWiki allows the creation of larger lexemes than the capped length of a thousand characters, as this length is not validated. This introduces denial-of-service attack vectors with...

CVE-2022-33879 Incomplete fix and new regex DoS in StandardsExtractingContentHandler

The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1...

Five Ways the Gaming & Gambling Industry is Targeted by Bad Bots

Let’s play a game of chance: What are the odds that your gaming website is being targeted by bad bots? Imperva research suggests they’re higher than you may think. Imperva’s 2022 Bad Bot Report reveals that 53.9 percent of traffic to gaming and gambling websites comes from bad bots. With the...

Instagram introduces new ways for users to verify their age

If Instagram suspects you are fibbing about your age, youll currently see the following message: “You must be at least 13 years old to have an Instagram account. We disabled your account because you are not old enough yet. If you believe we made a mistake, please verify your age by submitting a...

CVE-2022-1625

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

CVE-2022-1845

The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks...

newyorkpizza-annarbor.com Cross Site Scripting vulnerability OBB-2686178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-1625 New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes for bypassing the provided restrictions and to change plugin settings by tricking admin users into visitin...

CVE-2022-1625

The CVE-2022-1625 entry concerns the WordPress plugin New User Approve (versions prior to 2.4). The root cause is missing CSRF protection when updating plugin settings and when creating invitation codes, enabling an attacker to inject or modify data by luring an admin to a crafted page. Impact st...

WordPress plugin New User Approve 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress New User Approve plugin versions prior to 2.4 are vulnerable to cross-site request forgery, which...

Malicious Package

Overview new-npm-packages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview ddc-new-relic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview lexical-website-new is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

The vulnerability of the `ntfs_check_log_client_array` function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the ntfschecklogclientarray function in the NTFS file system relates to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created NTFS image file...

The vulnerability of the `ntfs_names_full_collate` function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the ntfsnamesfullcollate function in the NTFS file system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created NTFS image file...

SUSE: Security Advisory (SUSE-SU-2022:2137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in twitter-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62fd69dea005c32e68ba37d4f4c9aeb647e9ad8bf391f1474fc965712a4b8be0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6707 Malicious code in twitter-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62fd69dea005c32e68ba37d4f4c9aeb647e9ad8bf391f1474fc965712a4b8be0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...