551 matches found
PT-2024-8489 · Mozilla · Pdf.Js
Name of the Vulnerable Software and Affected Versions: macro-pdfviewer versions prior to 2.5.6 Description: The macro-pdfviewer, a PDF Viewer Macro for XWiki using Mozilla pdf.js, has a vulnerability that allows an attacker to view any attachment using the "Delegate my view right" feature. This c...
CVE-2024-36063
The Goodwy com.goodwy.dialer aka Right Dialer application through 5.1.0 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...
Goodwy Right Dialer 安全漏洞
Goodwy Right Dialer is a dialer software from Goodwy. A security vulnerability exists in Goodwy Right Dialer version 5.1.0 and earlier, which originates from an attacker being able to make a phone call without user interaction by sending a crafted intent to the...
PT-2024-26875 · Unknown · Com.Goodwy.Dialer
Name of the Vulnerable Software and Affected Versions: com.goodwy.dialer aka Right Dialer versions through 5.1.0 Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the com.goodwy.dialer.activities.DialerActivity component...
CVE-2024-49306
Cross-Site Request Forgery CSRF vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through = 3.5.9...
CVE-2024-49306
Cross-Site Request Forgery CSRF vulnerability in WP-buy WP Content Copy Protection & No Right Click allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through 3.5.9...
CVE-2024-49306
WP Content Copy Protection & No Right Click (WordPress plugin)
CVE-2024-49306 WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in wp-buy WP Content Copy Protection & No Right Click wp-content-copy-protector allows Cross Site Request Forgery.This issue affects WP Content Copy Protection & No Right Click: from n/a through = 3.5.9...
WordPress plugin WP Content Copy Protection & No Right Click 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...
WordPress WP Content Copy Protection & No Right Click plugin <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WP Content Copy Protection & No Right Click versions = 3.5.9...
WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.9 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Content Copy Protection & No Right Click Type Plugin Vulnerable versions = 3.5.9 Fixed in 3.6.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49306 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2fc979b85a6d...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper user input sanitization. An attacker can manipulate scripts in the user's browser by injecting malicious code into editable content areas. Exploiting this vulnerability is possible if the user ha...
CVE-2024-47815 Cross-site Scripting in IncidentReporting
IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...
‘Terrorgram’ Charges Show US Has Had Tools to Crack Down on Far-Right Terrorism All Along
The federal indictment of two alleged members of the Terrorgram Collective, a far-right cell accused of inspiring “lone wolf” attacks, reveals the US is now using a “forgotten” legal strategy...
Vim < 9.1.0689 Heap Buffer Overflow
The version of Vim installed on the remote host is after 9.1.0425 and prior to 9.1.0689. It is, therefore, affected by a heap buffer overflow vulnerability. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of t...
SUSE CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
DEBIAN-CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
PT-2024-6175 · Vim +3 · Vim +3
Name of the Vulnerable Software and Affected Versions: Vim versions prior to v9.1.0689 Description: The issue is related to a buffer overflow in the Vim text editor. When the search-count message is disabled and right-left mode is enabled, the search pattern is reversed and allocated in a new...
He Was an FBI Informant—and Inspired a Generation of Violent Extremists
Joshua Caleb Sutter infiltrated far-right extremist organizations as a confidential FBI informant, all while promoting hateful ideologies that influenced some of the internet's most violent groups...