9580 matches found
CVE-2021-24727
The StopBadBots WordPress plugin before 6.60 did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections...
Security Bulletin: Multiple vulnerabilities in IBM DB2 affect the IBM Intelligent Operations Center (CVE-2020-4701, CVE-2020-4739)
Summary Multiple vulnerabilities have been identified in DB2 11.1 which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details CVEID:...
EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting
Overview EC-CUBE plugin "List order management item change plug-in" provided by shiro8 Co., Ltd. contains a cross-site scripting vulnerability CWE-79. shiro8 Co., Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and shiro8 Co., Ltd. coordinated under...
PT-2021-16231 · WordPress · Membership & Content Restriction – Paid Member Subscriptions
Name of the Vulnerable Software and Affected Versions: Membership & Content Restriction – Paid Member Subscriptions WordPress plugin versions prior to 2.4.2 Description: The issue concerns the Membership & Content Restriction – Paid Member Subscriptions WordPress plugin, where the order and order...
JVN#46313661: EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting
EC-CUBE plugin "List order management item change plug-in" provided by shiro8 Co., Ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the administrative page of the product. Solution Update the plug...
ProtonMail Forced to Log IP Address of French Activist
The privacy-hugging, end-to-end encryption-providing email provider ProtonMail was forced to log the IP address of a French activist and turn it over to Europol, according to a French police report that came to light over the weekend. The activist was arrested as a result. In the wake of the news...
3 steps to prevent and recover from ransomware
On July 14, 2021, the National Cybersecurity Center of Excellence1 NCCoE at the National Institute of Standards and Technology2 NIST hosted a virtual workshop3 to seek feedback from government and industry experts on practical approaches to preventing and recovering from ransomware and other...
CVE-2021-24588
The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...
CVE-2021-24588 SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting
The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...
CVE-2021-24588
The WordPress plugin SMS Alert Order Notifications – WooCommerce (versions before 3.4.7) is affected by an authenticated cross-site scripting (XSS) vulnerability in the settings page. CVE-2021-24588 documents an XSS with a CVSS v3.1 base score of 6.1. Remediation: upgrade to version 3.4.7 or late...
WordPress 插件跨站脚本漏洞
WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress plugin, which stems from a cross-site scripting XSS vulnerability in the settings page of the SMS Alert Order Notifications...
Affirm: IDOR to view order information of users and personal information
Summary: Broken access control is the method of controlling which users can perform a certain type of action or view set of data. Broken access control is a vulnerability that allows an attacker to circumvent those controls and perform more actions than they are allowed to, or view content they...
Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement
Cataclysmic breaches and a woeful shortage of a trained cybersecurity workforce prompted the Biden Administration to haul a collection of the biggest names in business into a White House cybersecurity summit this week, to talk about what they plan to do about it. The outcome of the talks falls...
Hotfix XS82E031 - For Citrix Hypervisor 8.2
Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart the XAPI Toolstack Content live patchable| No Baselines for Live Patch| N/A Revision History|...
GHSA-G4VJ-X7V9-H82M Overflow in libsecp256k1
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow...
Guangdong Agricultural Credit WeChat public number has a logic flaw vulnerability
Guangdong Agricultural Credit WeChat Public Number is the official WeChat public number of Guangdong Rural Credit Union Federation, which mainly publicizes the financial services and reform and development achievements of the provincial federation and the province's agricultural commercial banks...
Incorrect Behavior Order
telegram-desktop has Incorrect Behavior Order vulnerability. An attacker can cause the server to receive messages in a different order than they were sent a client...
moodle.orderofmalta.ie Cross Site Scripting vulnerability OBB-2122356
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Laundry Booking Management System 1.0 - Multiple SQL Injection Vulnerability
Exploit Title: Laundry Booking Management System 1.0 - 'Multiple' SQL Injection Exploit Author: Azumah Foresight Xorlali Vendor Homepage: https://www.sourcecodester.com/php/14400/laundry-booking-management-system-php-source-code.html Software Link:...
