CVE-2024-43288 WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4...

CVE-2024-43321

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

CVE-2024-43321

CVE-2024-43321 corresponds to a Stored XSS vulnerability in the PickPlugins Team Showcase WordPress plugin (Team Showcase) prior to version 1.22.23. The issue involves improper input neutralization during web page generation, enabling stored cross-site scripting. According to the connected Wordfe...

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

CVE-2024-43321 WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23...

WordPress plugin Team Showcase 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

GHSA-VWF8-Q6FW-4WCM Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API

Impact Due to ReferenceGrant changes not being immediately propagated in Cilium's GatewayAPI controller, Gateway resources are able to access secrets in other namespaces after the associated ReferenceGrant has been revoked. This can lead to Gateways continuing to establish sessions using secrets...

WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Team Showcase versions = 1.22.23...

WordPress Team Showcase Plugin <= 1.22.23 is vulnerable to Cross Site Scripting (XSS)

Software Team Showcase Type Plugin Vulnerable versions = 1.22.23 Fixed in 1.22.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43321 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 48667d784b23 Credits LVT-tholv2k Required privilege...

Brandon Adkins’ Career Journey - Taking Chances and Tackling New Challenges

Brandon Adkins is the Manager of our Threat Intelligence & Detection Engineering TIDE team. His career journey spans a variety of roles and teams where he has been able to showcase his technical skills in security. Since joining Rapid7, he’s had experience as a Penetration Testing Consultant,...

PT-2024-21053 · Elabftw · Elabftw

Name of the Vulnerable Software and Affected Versions: eLabFTW versions 4.4.0 through 4.9.x are not explicitly mentioned, but since the vulnerability exists starting in version 4.4.0 and prior to version 5.0.0, it can be simplified to: eLabFTW versions 4.4.0 through 4.9.x is not needed, instead...

PT-2024-40936 · Minitrace · Minitrace

Name of the Vulnerable Software and Affected Versions: minitrace affected versions not specified Description: The minitrace maintainers have decided to stop maintaining minitrace and are instead continuing its development under a new organizational structure. As a result, minitrace is no longer...

CVE-2024-7570

creationtimestamp| type| source ---|---|--- 2024-08-13 22:08:56+00:00| seen| https://t.me/cvedetector/3076 2024-08-14 09:24:16+00:00| seen| https://t.me/HackingInsights/9817 2024-08-15 14:00:07+00:00| seen| https://t.me/truesecator/6097 2025-05-13 16:05:17+00:00| seen|...

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

A team of researchers from the CISPA Helmholtz Center for Information Security in Germany has disclosed an architectural bug impacting Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs that could allow attackers to gain unrestricted access to susceptible devices. The vulnerability h...

CVE-2024-43138

CVE-2024-43138 affects Event Manager and Tickets Selling Plugin for WooCommerce (Mage Event/ WPEvently) up to 4.2.1. It is an authenticated Local File Inclusion (LFI) due to improper path handling, enabling access to restricted files. The Wordfence vulnerability listing notes it as Authenticated ...

CVE-2024-43138 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommerce: from n/a through 4.2.1...

CVE-2024-35775

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Authentication vulnerability in Soliloquy Team Slider by Soliloquy allows Cross-Site Scripting XSS.This issue affects Slider by Soliloquy: from n/a through 2.7.6...

CVE-2024-35775

CVE-2024-35775 : Vulnerability in Slider by Soliloquy (Soliloquy Lite) for WordPress. The issue is an XSS due to improper input handling and missing authorization in the Slider component, affecting versions up to and including 2.7.6. The root cause is improper authentication/authorization around ...

CVE-2024-7693

Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server...

CVE-2024-7693 Team Johnlong software Raiden MAILD Remote Management System - Arbitrary File Reading through Path Traversal

Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server...