How Microsoft can help reduce insider risk during the Great Reshuffle

These are exciting and demanding days for organizations adapting to hybrid work realities, including a wider distributed workforce and more rapid change in employee roles. Organizations are becoming more agile as they refocus on employee onboarding and empowerment, opportunities with third-party...

WordPress Premmerce User Roles plugin <= 1.0.10 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Premmerce User Roles plugin versions = 1.0.10. Solution Update the WordPress Premmerce User Roles plugin to the latest available version at least 1.0.11...

WordPress Premmerce User Roles plugin <= 1.0.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Premmerce User Roles plugin versions = 1.0.10. Solution Update the WordPress Premmerce User Roles plugin to the latest available version at least 1.0.11...

WordPress HM Multiple Roles plugin < 1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress HM Multiple Roles plugin versions 1.6. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.6...

WordPress HM Multiple Roles plugin < 1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress HM Multiple Roles plugin versions 1.6. Solution Update the WordPress HM Multiple Roles plugin to the latest available version at least 1.6...

Improper Authorization

Description A low-privilege user I tested it with Editor priv user can create any role in the application. Proof of Concept Make a POST request to /Admin/Roles/Create using low-priv user's cookie and RequestVerificationToken A new role will be created with the specified name. Impact A low-priv us...

Let’s Get Under the Hood of Imperva Snapshot

A stress-free guide for the prudent cloud operator With minimal setup, Imperva Snapshot enables you to immediately start your in-depth Amazon Web Services AWS RDS database assessment. With no prior training required, cloud operators can use this useful tool to pinpoint deficiencies in their...

Foundation Treasury initialize() function can be called by an attacker first

Lines of code Vulnerability details Impact In FoundationTreasury.sol the initialize function can only be called once setting the admin and operator roles which are used in other contracts. The problem is that this initialize function is not called in any deployment script which means an attacker...

Hide Admin Bar Based on User Roles < 3.1.0 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, allowing attackers to make a logged in admin update the plugin's settings via a CSRF attack https://example.com/wp-admin/admin-ajax.php?action=saveuserroles&caps=test&disableForAll=no...

Hide Admin Bar Based on User Roles < 3.0.0 - Subscriber+ Settings Update

The plugin does not have authorisation and CSRF checks, allowing any authenticated users, such as subscriber, to update the plugin's settings https://example.com/wp-admin/admin-ajax.php?action=saveuserroles&caps=test&disableForAll=no...

Hide Admin Bar Based on User Roles < 3.1.0 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, allowing attackers to make a logged in admin update the plugin's settings via a CSRF attack PoC https://example.com/wp-admin/admin-ajax.php?action=saveuserroles=test=no...

WordPress Hide Admin Bar Based on User Roles plugin <= 2.9.0 - Subscriber+ Settings Update vulnerability

Subscriber+ Settings Update vulnerability discovered by Jan w Oleju in WordPress Hide Admin Bar Based on User Roles plugin versions = 2.9.0. Solution Update the WordPress Hide Admin Bar Based on User Roles plugin to the latest available version at least 3.0.0...

XWiki Platform Access Control Error Vulnerability

Xwiki Platform is a Wiki platform used to create Web collaboration applications from the French company Xwiki. XWiki Platform has an access control error vulnerability that stems from the application not properly restricting access to resources from unauthorized roles, which could be exploited by...

Authorization Bypass

github.com/flipped-aurora/gin-vue-admin is vulnerable to authorization bypass. The vulnerability exists in setuserinfo function of sysuser.go because the user roles are not properly authorized which allows a malicious user to modify any information of the administrator...

XWiki Platform 安全漏洞

Xwiki Platform is a Wiki platform used to create Web collaboration applications from the French company Xwiki. XWiki Platform has an access control error vulnerability that stems from the application not properly restricting access to resources from unauthorized roles, which could be exploited by...

SQLRecon - A C# MS SQL Toolkit Designed For Offensive Reconnaissance And Post-Exploitation

A C MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki. Usage You can grab a copy of SQLRecon from the releases page. Alternatively, feel free to compile the solution yourself This should be as straight...

Cross-site Scripting (XSS)

Overview s-cart/core is a free Laravel e-commerce for business. Affected versions of this package are vulnerable to Cross-site Scripting XSS which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's account through the...

Reolink Rlc-410W Access Control Error Vulnerability

Reolink Rlc-410W is a Wifi security camera from Reolink China.The Reolink RLC-410W in version v3.0.0.13620121102 is vulnerable to an access control error that stems from the device's factory binary not properly restricting access to resources from unauthorized roles. An attacker could exploit the...

OneBlog Permission License and Access Control Issues Vulnerability

OneBlog is a beautiful, powerful Java blog. OneBlog in version 2.2.8 and earlier suffers from a Permissions Permission and Access Control Issues vulnerability that arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker coul...

CVE-2022-23008

On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software...