WordPress New User Approve plugin <= 2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress New User Approve plugin versions = 2.0. Solution Update the WordPress New User Approve plugin to the latest available version at least 2.1...

WordPress New User Approve plugin <= 2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress New User Approve plugin versions = 2.0. Solution Update the WordPress New User Approve plugin to the latest available version at least 2.1...

newmexico.org Cross Site Scripting vulnerability OBB-2384336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2019-4524

IBM Db2 for Linux, UNIX and Windows contains CVE-2019-4524, an information-disclosure vulnerability that exposes remote storage credentials to privileged users after running LOAD or UPDATE ALERT CFG through the ADMIN_CMD() stored procedure. Affected are all fix-pack levels of Db2 V9.7, V10.1, V10...

CVE-2014-8881

Summary: The connected advisories indicate a Regular Expression Denial of Service (ReDoS) affecting all versions of the Python package bleach during its sanitize function. The issue is not tied to a specific version release in the provided documents; the advisories state all versions are vulnerab...

CVE-2021-11191

Technical details for CVE-2021-11191 are not publicly available in the provided documents. Monitor for updates; no affected products, exploit info, or remediation details are stated in the supplied material.

Active Sync Gateway Connector isn't working with new devices since Update to 10.14 RP4

After upgrading from 10.14 RP3 - 10.14 RP4 any new enrolled device can't access to our Exchange Server via Active Sync Connector. After rebooting XenMobile server during the update process, we observe errors in the RemoteConfigService.log file as follows: Error |...

Interest surplus is accumulated on Master accounting update in TurboSafe.less

Lines of code Vulnerability details Impact There will be an interest surplus accumulating in all the master accounting variables totalBoosted, getTotalBoostedForVault and getTotalBoostedAgainstCollateral. As getTotalBoostedForVault and getTotalBoostedAgainstCollateral are used in the checks again...

CVE-2021-44573

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3200 Reason: This candidate is a duplicate of CVE-2021-3200. Notes: All CVE users should reference CVE-2021-3200 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2021-20315

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start n...

Cross-site Scripting (XSS) - Stored

Stored-xss is possible when adding a rule. Create a new Alert Rule like below and adjust the query like below with the following payload " Save the rule and see a xss-pop up...

OPENSUSE-SU-2022:0037-1 Security update for firejail

This update for firejail fixes the following issues: - Update Leap 15.3 package to 0.9.68 boo1195880 update to firejail 0.9.68: - security: on Ubuntu, the PPA is now recommended over the distro package - see README.md 4748 - security: bugfix: private-cwd leaks access to the entire filesystem -...

Kali Linux 2022.1 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.1. This release has various impressive updates. The summary of the changelog since the 2021.4 release from December 2021 is: Visual Refresh - Updated wallpapers and GRUB theme Shell Prompt Changes - Visual improvements to improve readability...

Security update for firejail (important)

openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2022:0037-1 Rating: important References: 1195880 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: This update for firejail fixes the...

Download Kali Linux 2022.1 with new tools and wider SSH compatibility

By Waqas You can download Kali Linux 2022.1 now or update your existing Kali Linux installation to the new one.… This is a post from HackRead.com Read the original post: Download Kali Linux 2022.1 with new tools and wider SSH compatibility...

Mozilla: Extensions could have bypassed permission confirmation during update

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: If a user installed a particular type of extension, the extension could have auto-updated itself, and while doing so may have bypassed the prompt which grants the new version the new requested permission...

Buffer Overflow in galois_2p8

In galois2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector...

Mozilla: Extensions could have bypassed permission confirmation during update

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: If a user installed a particular type of extension, the extension could have auto-updated itself, and while doing so may have bypassed the prompt which grants the new version the new requested permission...

galois_2p8 安全漏洞

Galois2p8 is a basic arithmetic library for all Gf2^8 fields by the individual developer Daniel Sweet. A security vulnerability exists in galois2p8 versions prior to 0.1.2, which stems from PrimitivePolynomialField::new having an off by one buffer overflow for vectors...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists when a user is convinced to drag and drop an image to their desktop or other folder which allows an attacker to cause an application crash...