2143 matches found
AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft's Multi-Factor Authentication MFA, known as AuthQuake,…...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 25, 2024 to December 1, 2024)
Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with ourEnd of Year Holiday Extravaganza , High-Risk Bonus Blitz Challenge , and Superhero Challenge for the Wordfence Bug Bounty Program. Through January 6th, 2025: All in-scope vulnerability types for...
Exploit for Cross-site Scripting in Heateor Sassy_Social_Share
CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability...
Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager
CVE-2024-47575 Fortinet FortiManager Unauthenticated Remote Co...
Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel
CVE-2022-48565 PoC Introduction This is a Proof of Concep...
Exploit for Improper Restriction of XML External Entity Reference in Python
CVE-2022-48565 PoC Introduction This is a Proof of Concep...
Exploit for OS Command Injection in Paloaltonetworks Expedition
CVE-2024-9464: Palo Alto Expedition Authenticated Command Inje...
Exploit for SQL Injection in Paloaltonetworks Expedition
CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Inject...
Agnai vulnerable to Relative Path Traversal in Image Upload
Summary A vulnerability has been discovered in Agnai that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for...
Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance
CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...
Exploit for Improper Input Validation in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager
CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...
Exploit for CVE-2024-7954
CVE-2024-7954 This exploit will attempt to execute system comm...
Malicious code in bitcommit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e954ac7acd6af73d285edea41177ee09be01a2e14a1b4e6b195ba7e07b9515 Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...
Malicious code in c2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5bf8fb109bddeaac7b9818f893783456619c44562c50fe26abea906cbc1ef06a Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...
MAL-2024-12219 Malicious code in bitcommit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e954ac7acd6af73d285edea41177ee09be01a2e14a1b4e6b195ba7e07b9515 Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...
Earn Up to $31,200 Per Vulnerability: Introducing the WordPress Bug Bounty Superhero Challenge!
Today, we’re incredibly excited to launch a new challenge for the Wordfence Bug Bounty Program: the WordPress Superhero Challenge! Through October 14th, we’re introducing a new active installation count range for our bounties for plugins and themes with 5,000,000+ active installations and we are...
Exploit for Improper Restriction of Excessive Authentication Attempts in Logsign Unified_Secops_Platform
Logsign SIEM RCE Exploit CVE-2024-5716 & CVE-2024-5717 This...
Korenix JetPort Series 1.2 Command Injection / Insufficient Authentication
CyberDanube Security Research 20240805-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities in JetPort Series product| Korenix JetPort Series vulnerable version| 1.2 fixed version| None CVE number| CVE-2024-7395, CVE-2024-7396,...