CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

[SECURITY] Fedora 40 Update: xen-4.18.4-2.fc40

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 42 Update: xen-4.19.1-7.fc42

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. This CVE number has...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

cve-2025-24813poc cve-2025-24813 Verification Script...

Head Mare and Twelve join forces to attack Russian entities

Introduction In September 2024, a series of attacks targeted Russian companies, revealing indicators of compromise and tactics associated with two hacktivist groups: Head Mare and Twelve. Our investigation showed that Head Mare relied heavily on tools previously associated with Twelve...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, as well as the FortiAnalyzer security event monitoring and analysis tools, stems from insecure privilege management. This allows attackers to escalate their privileges.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, as well as the FortiAnalyzer security monitoring and analysis tools, is related to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, kubeflow-pipelines, helm-operator-fips, memcached-exporter, flux-notification-controller, vault, kubeflow-fips, nemo, kapp, neuvector-sigstore-interface-fips, step-issuer, tailscale, sftpgo-plugin-pubsub, fulcio-fips, harbor-fips...

Improper Verification Of Cryptographic Signature

dotnet-debugger-extensions, dotnet-dump and dotnet-sos are vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is due to insufficient validation mechanisms, allowing an authorized attacker to execute code over a network...

MAL-2025-2276 Malicious code in relay-prototyping-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4755f649ce600841398c2b1dc4307b25489b71cb35ff35c8cd5be5dcac90bae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in relay-prototyping-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4755f649ce600841398c2b1dc4307b25489b71cb35ff35c8cd5be5dcac90bae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Isolation or Compartmentalization

Overview promptflow-tools is a Prompt flow built-in tools Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization due to improper isolation or compartmentalization in the handling of Jinja templates. Remediation Upgrade promptflow-tools to version 1.6.0 or...

Steganography Explained: How XWorm Hides Inside Images

Inside the most innocent-looking image, a breathtaking landscape, or a funny meme, something dangerous could be hiding, waiting for its moment to strike. No strange file names. No antivirus warnings. Just a harmless picture, secretly concealing a payload that can steal data, execute malware, and...

CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13853 SEO Tools <= 4.0.7 - Reflected XSS

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13853

The SEO Tools WordPress plugin (versions through 4.0.7 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape the 'src' parameter within the rssread.php file before outputting it back to the page. This allows unauthenticated attacke...

CVE-2024-13853 SEO Tools <= 4.0.7 - Reflected XSS

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Azure promptflow-core,Azu...

WordPress plugin SEO Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...