45 matches found
WordPress DukaPress plugin <= 3.2.4 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Vuln Seeker Cyber Security Team in WordPress Plugin DukaPress versions = 3.2.4...
EUVD-2024-16025
Malicious code in bioql PyPI...
EUVD-2024-51334
Malicious code in bioql PyPI...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
A week in security (February 3 – February 9)
Last week on Malwarebytes Labs: WhatsApp says Paragon is spying on specific users New AI "agents" could hold people for ransom in 2025 Valley News Live exposed more than a million job seeker’s resumes Small business owners, secure your web shop University site cloned to evade ad detection...
Valley News Live exposed more than a million job seeker’s resumes
Making your own bad news is not what Valley News Live had in mind, but negligence comes at a price. Cybernews researchers found an unprotected AWS S3 bucket that belongs to Take Valley News Live, a North Dakota-based television station. Gray Television, the owner of Valley News Live, makes for th...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093 code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /parse/callmainsearchajax.php of the component Seeker Profile Handler. The manipulation of the argument s1 leads to sql injection. The...
CVE-2024-13093
CVE-2024-13093 affects code-projects Job Recruitment 1.0, with a SQL injection in the Seeker Profile Handler. The vulnerability is in the file /_parse/_call_main_search_ajax.php, caused by manipulation of the parameter s1. The attack can be launched remotely and, per the provided descriptions, th...
WordPress 3DPrint Lite plugin < 2.1 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin 3DPrint Lite versions 2.1...
WordPress pz-frontend-manager Plugin < 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software pz-frontend-manager Type Plugin Vulnerable versions 1.0.6 Fixed in 1.0.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6244 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 00622e75c008 Credits Vuln Seeker...
WordPress Light Poll plugin <= 1.0.0 - Poll Answers Deletion via CSRF vulnerability
Poll Answers Deletion via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin Light Poll versions = 1.0.0...
CVE-2024-0226
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
CVE-2024-0226
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
Cross site scripting
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
CVE-2024-0226
CVE-2024-0226 affects Synopsys Seeker versions prior to 2023.12.0. The vulnerability is a stored cross-site scripting flaw introduced via a specially crafted payload. The NVD entry rates the base impact as Low for confidentiality and integrity (no availability impact) with network attack vector a...
CVE-2024-0226 Stored Cross-Site Scripting in Synopsys Seeker
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
CVE-2024-0226 Stored Cross-Site Scripting in Synopsys Seeker
Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload...
PT-2024-15396 · Synopsys · Synopsys Seeker
Name of the Vulnerable Software and Affected Versions: Synopsys Seeker versions prior to 2023.12.0 Description: The issue is a stored cross-site scripting vulnerability that can be exploited through a specially crafted payload. Recommendations: For versions prior to 2023.12.0, update to version...