Researchers Find Way to Shut Down Cryptominer Campaigns Using Bad Shares and XMRogue

Cybersecurity researchers have detailed two novel methods that can be used to disrupt cryptocurrency mining botnets. The methods take advantage of the design of various common mining topologies in order to shut down the mining process, Akamai said in a new report published today. "We developed tw...

CVE-2024-29914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MotoPress Stratum allows Stored XSS.This issue affects Stratum: from n/a through 1.3.15...

CVE-2024-5611

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘labelyears’ attribute within the Countdown widget in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress Stratum plugin <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget vulnerability discovered by zer0gh0st in WordPress Plugin Stratum versions = 1.4.7...

CVE-2024-13642

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13642 Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13642

The CVE refers to WordPress Stratum – Elementor Widgets (Stratum) plugin, vulnerable to Stored Cross-Site Scripting via the Image Hotspot widget. The issue exists in all versions up to and including 1.4.7 and stems from insufficient input sanitization and output escaping on user-supplied attribut...

WordPress plugin Stratum – Elementor Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2024-13642: Improper Neutralization of Input During Web Page Generation

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hotspot widget in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-2233 · WordPress · Stratum – Elementor Widgets

Name of the Vulnerable Software and Affected Versions: Stratum – Elementor Widgets plugin for WordPress versions up to, and including, 1.4.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the Image Hotspot widget, allowing...

The vulnerability of the S1AP protocol implementation in the NextEPC module allows a violator to enhance their privileges.

The vulnerability of the S1AP protocol implementation in the NextEPC module is related to the execution of operations outside the stack buffer. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending a specially crafted NAS message...

Magma 代码问题漏洞

Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A code issue vulnerability exists in Magma 1.8.0 and prior versions, which stems from the fact that the absence of the mandatory NASPDU field in the...

NextEPC MME 安全漏洞

NextEPC MME is an open source implementation of NextEPC's 4G/5G 3GPP core network. A security vulnerability exists in NextEPC MME 1.0.1 and prior versions, which stems from a heap buffer overflow in Emergency Number List decoding that allows an attacker to overwrite the stack by sending a special...

Magma 缓冲区错误漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service DoS via a crafted NAS...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a stack overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted NAS packet...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted N...

Quectel BG96 安全漏洞

The Quectel BG96 is a LTE Cat M1/Cat NB1/EGPRS wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BG96 BG96MAR02A08M1G version that originates from a vulnerability that allows an attacker to bypass authentication via a crafted NA...

Quectel BC25 安全漏洞

The Quectel BC25 is a high-performance, low-power NB-IoT wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in the Quectel BC25 BC25PAR01A06 version, which originated from a vulnerability that allows an attacker to bypass authentication via a...

Quectel BC95-CNV 安全漏洞

The Quectel BC95-CNV is a high-performance, low-power, multi-band LTE Cat NB2 wireless communication module from China Mobile Communications Quectel. A security vulnerability exists in Quectel BC95-CNV version V100R001C00SPC051, which originated from a vulnerability that allows an attacker to...