Yurei Ransomware Uses Common Tools, Adds Stranger Things References

Team Cymru details the Yurei ransomware campaign, using standard tools and a few Stranger Things–named payloads to breach and encrypt systems...

EUVD-2024-45538

Malicious code in bioql PyPI...

EUVD-2023-32115

Malicious code in bioql PyPI...

CVE-2024-51779

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

CVE-2024-51779 WordPress Don't Break The Code plugin <= .3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

embadal.com Cross Site Scripting vulnerability OBB-3800728

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-28419

Cross-Site Request Forgery CSRF vulnerability in Stranger Studios Force First and Last Name as Display Name plugin = 1.2 versions...

CVE-2023-28419

Cross-Site Request Forgery CSRF vulnerability in Stranger Studios Force First and Last Name as Display Name plugin = 1.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Stranger Studios Force First and Last Name as Display Name plugin = 1.2 versions...

CVE-2023-28419

CVE-2023-28419 is a CSRF vulnerability in the WordPress plugin Force First and Last Name as Display Name (

PT-2023-21705 · Stranger Studios · Stranger Studios Force First/Last Name As Display Name Plugin

Name of the Vulnerable Software and Affected Versions: Stranger Studios Force First and Last Name as Display Name plugin versions 1.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user int...

Malicious code in stranger-strings-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0eb204bfcf29270cc49274f3388170c77d866c2f6e0a88d4336c01732a365768 The OpenSSF Package Analysis project identified 'stranger-strings-functions' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

How to Keep Nearby Strangers from Sending You Files

Sharing is caring—except when it's an unwelcome photo from a rando on the subway. Here's how to lock down your phone and computer...

Denial of Service Vulnerability in Stray Sound App

Stranger Sound APP is a dating app that singles are playing. A denial of service vulnerability exists in Stranger Sound APP, which can be exploited by attackers to cause the app to crash...

BSA-2020-1028

Security Advisory ID : BSA-2020-1028 Component : Call Stranger Revision : 1.0: Final A vulnerability in the UPnP SUBSCRIBE capability permits an attacker to send large amounts of data to arbitrary destinations accessible over the Internet, which could lead to a Distributed Denial of Service DDoS,...

Social engineering. When you’re the mark…

Who am I? I am Scott, and you may have met me, if you did your recollection of me will be unique most likely. I am a social chameleon. I can be your best mate, the lost friend you never knew you lost and even an expert in things you are interested in. I live off your stories and I weave my way in...

Amazon sent 1,700 audio recordings of Alexa user to a stranger

By Waqas An Amazon customer in Germany under the European Union data protection law called GDPR General Data Protection Regulation requested the company to send all the data it stored on him but little did he know he was about to get his hands on a trove of 1,700 audio recordings of a stranger...

Remote Code Execution Vulnerability in Stranger Client

Stranger is a location-based mobile social networking tool. There is a remote code execution vulnerability in the Stranger client, which can be exploited by an attacker to trigger an attack code to automatically download and automatically use the interface to install any application, call sensiti...

Multiple XSS Vulnerabilities in Paid Memberships Pro WordPress Plugin

Advisory ID: HTB23264 Product: Paid Memberships Pro WordPress plugin Vendor: Stranger Studios Vulnerable Versions: 1.8.4.2 and probably prior Tested Version: 1.8.4.2 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Vendor Patch: July 8, 2015 Public...

WordPress Paid Memberships Pro 1.8.4.2 Cross Site Scripting Vulnerability

WordPress Paid Memberships Pro plugin version 1.8.4.2 suffers from a cross site scripting vulnerability. Product: Paid Memberships Pro WordPress plugin Vendor: Stranger Studios Vulnerable Versions: 1.8.4.2 and probably prior Tested Version: 1.8.4.2 Advisory Publication: July 1, 2015 without...