WordPress Easy Post Types Plugin <= 1.4.4 is vulnerable to Broken Access Control

Software Easy Post Types Type Plugin Vulnerable versions = 1.4.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-10078 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5b9726265fc7 Credits István Márton Required...

WordPress PageLayer Plugin < 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions 1.7.7 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4687 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a2e6d35b385c Credits Marc Montpas Required...

CVE-2023-37266

creationtimestamp| type| source ---|---|--- 2023-07-18 00:45:24+00:00| seen| https://t.me/cibsecurity/66856 2023-10-17 17:35:31+00:00| seen| https://t.me/KomunitiSiber/945 2023-10-17 17:40:39+00:00| seen| Telegram/DhBuM5h9ZembCAXJLb1SO10emtONhvTPWBycf14R0dULg...

lesjardinsaquatiques.fr Cross Site Scripting vulnerability OBB-3002190

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

footandanklespecialtycenter.com Cross Site Scripting vulnerability OBB-3001682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lhb.kr Cross Site Scripting vulnerability OBB-1418483

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

sf.patagoniaentertainment.com Cross Site Scripting vulnerability OBB-1418303

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

spalni-po-proekt-sofiia.otmahagon.com Cross Site Scripting vulnerability OBB-1418292

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

7468.nv9e.com Cross Site Scripting vulnerability OBB-1417349

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bouhan-glass.jp Cross Site Scripting vulnerability OBB-1416838

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Threat Outbreak Alert RuleID25681: Email Messages Distributing Malicious Software on October 17, 2016

Medium Alert ID: 49311 First Published: 2016 October 17 17:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25681 may contain the following files: Name |...

Threat Outbreak Alert RuleID25671: Email Messages Distributing Malicious Software on October 17, 2016

Medium Alert ID: 49307 First Published: 2016 October 17 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25671 may contain the following files: Name |...

Threat Outbreak Alert RuleID25661: Email Messages Distributing Malicious Software on October 17, 2016

Medium Alert ID: 49303 First Published: 2016 October 17 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25661 may contain the following files: Name |...

Threat Outbreak Alert RuleID25262: Email Messages Distributing Malicious Software on October 17, 2016

Medium Alert ID: 49293 First Published: 2016 October 17 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25262 may contain the following files: Name |...

Threat Outbreak Alert RuleID18742: Email Messages Distributing Malicious Software on October 17, 2015

Medium Alert ID: 41586 First Published: 2015 October 19 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18742 may contain the following files: Name |...

Threat Outbreak Alert RuleID18784: Email Messages Distributing Malicious Software on October 17, 2015

Medium Alert ID: 41590 First Published: 2015 October 19 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18784 may contain the following files: Name |...

Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)

Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...

Oracle 10g - CTX_DOC.MARKUP SQL Injection

Oracle 10g - CTXDOC.MARKUP SQL Injection // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr"...