1267 matches found
CVE-2024-25710 vulnerabilities
Vulnerabilities for packages: kayenta, gradle, kayenta-fips, tez, hadoop-fips, wavefront-proxy, opensearch, dependency-track, trino, celeborn, hadoop-client-modules, spdx-tools-java, druid...
GHSA-GVPG-VGMX-XG6W vulnerabilities
Vulnerabilities for packages: sonarqube-10, dependency-track, celeborn, druid, thingsboard, tez...
GHSA-GVPG-VGMX-XG6W vulnerabilities
Vulnerabilities for packages: elasticsearch, tez, sonarqube-10, dependency-track, celeborn, thingsboard, hadoop-client-modules, druid...
CVE-2023-52428 vulnerabilities
Vulnerabilities for packages: elasticsearch, tez, sonarqube-10, dependency-track, celeborn, thingsboard, hadoop-client-modules, druid...
CVE-2023-52428 vulnerabilities
Vulnerabilities for packages: sonarqube-10, dependency-track, celeborn, druid, thingsboard, tez...
London Underground Is Testing Real-Time AI Surveillance Tools to Spot Crime
In a test at one station, Transport for London used a computer vision system to try and detect crime and weapons, people falling on the tracks, and fare dodgers, documents obtained by WIRED show...
PT-2024-1292
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.1 Description The issue is related to an off-by-one error in the rds recv track latency function in the Linux kernel, specifically in the net/rds/af rds.c file. This error occurs during an RDS MSG RX DGRAM TRA...
CVE-2023-5041
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database...
CVE-2023-5041
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database...
CVE-2023-5041 Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database...
CVE-2023-5041
The CVE-2023-5041 entry concerns the Track The Click WordPress plugin (versions before 0.3.12). Root cause: improper sanitization of query parameters to the stats REST endpoint, enabling a time-based blind SQL injection in database queries when accessed by an authenticated user with author role o...
PT-2024-13936 · WordPress · Track The Click
Name of the Vulnerable Software and Affected Versions: The Track The Click WordPress plugin versions prior to 0.3.12 Description: The issue arises from the plugin's failure to properly sanitize query parameters to the stats REST endpoint before using them in a database query. This allows a...
WordPress Plugin Track The Click Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
CVE-2023-33209
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CrawlSpider SEO Change Monitor – Track Website Changes.This issue affects SEO Change Monitor – Track Website Changes: from n/a through 1.2...
Chrome starts the countdown to the end of tracking cookies
Google has announced that it will start rolling its Chrome web browsers new Tracking Protection feature from January of 2024. Tracking Protection is part of Google’s Privacy Sandbox initiative to phase out third-party cookies. The Tracking Protection feature aims to disable third-party cookies...
CVE-2023-49188
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZealousWeb Track Geolocation Of Users Using Contact Form 7 allows Stored XSS.This issue affects Track Geolocation Of Users Using Contact Form 7: from n/a through 2.0...
CVE-2023-49188
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZealousWeb Track Geolocation Of Users Using Contact Form 7 allows Stored XSS.This issue affects Track Geolocation Of Users Using Contact Form 7: from n/a through 2.0...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZealousWeb Track Geolocation Of Users Using Contact Form 7 allows Stored XSS.This issue affects Track Geolocation Of Users Using Contact Form 7: from n/a through 1.4...
WordPress Plugin Track Geolocation Of Users Using Contact Form 7 Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
