CVE-2022-4678

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Cross site scripting

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0333

The CVE-2023-0333 entry concerns the TemplatesNext ToolKit WordPress plugin prior to version 3.2.9. The issue is that the plugin does not validate some shortcode attributes before using them to generate HTML tags, enabling Stored Cross-Site Scripting (XSS) when an attacker with Contributor privil...

CVE-2023-0333 TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0333 TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4678 TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4678

CVE-2022-4678 affects the TemplatesNext ToolKit WordPress plugin prior to 3.2.8. The vulnerability arises because certain shortcode attributes are not validated or escaped before being output, enabling Stored XSS for users with the contributor role or higher in pages/posts where the shortcode is ...

CVE-2022-4678 TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

Chinese Tonto Team Hackers' Second Attempt to Target Cybersecurity Firm Group-IB Fails

The advanced persistent threat APT actor known as Tonto Team carried out an unsuccessful attack on cybersecurity company Group-IB in June 2022. The Singapore-headquartered firm said that it detected and blocked malicious phishing emails originating from the group targeting its employees. It's als...

[SECURITY] Fedora 37 Update: qt5-qtbase-5.15.8-5.fc37

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

WordPress plugin TemplatesNext ToolKit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress plugin TemplatesNext ToolKit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

DNSrecon-gui - DNSrecon Tool With GUI For Kali Linux

DNSRecon is a DNS scanning and enumeration tool written in Python, which allows you to perform different tasks, such as enumeration of standard records for a defined domain A, NS, SOA, and MX. Top-level domain expansion for a defined domain. With this graph-oriented user interface, the different...

MAL-2023-2007 Malicious code in prompt-toollkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cd4ed78a11c95724967c6161e24facba220d07404deff69a75ce6a5ce9e93015 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-oolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01a684f148e0fd583e1f56464297de201abdc9c46efa728d260f73ccfc267c58 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolkkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c4c251d3a780df7d6fe90e182237b6e011ea4e21c2e694611658bd6e4c278689 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolikt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c36e96006a4f013f897b66377119f00de5576d5cb83cc51707f22c0584f13971 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prmopt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ee7ba5aaf4be0952abc2bada752ea586dd24ffc7cd0fe61f5d852f7273f08b2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in proompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1bb36c3b91fb3a6e9914aed1c048572102d76dd209a7bac85cb2ec220ef55e90 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 675eb0f2bc82cc672a20e6da1b01697163dfbfbc9b6fb7267b2b465f16529cb9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...