CVE-2024-10309

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

creationtimestamp| type| source ---|---|--- 2025-01-30 06:09:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113915812623981683 2025-01-30 06:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthfi5732n 2025-01-30 07:11:30+00:00| seen|...

CVE-2024-10309 Tracking Code Manager < 2.4.0 - Contributor+ Stored XSS

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

The CVE concerns the Tracking Code Manager WordPress plugin, affected versions before 2.4.0. The root cause is improper sanitisation/escaping of certain metabox settings when they are output on a page, enabling Cross-Site Scripting (XSS). The impact allows users with as low as the Contributor rol...

Google gVisor 安全漏洞

Google gVisor is a user-space kernel from Google written in the Go language for use in Linux systems. A security vulnerability exists in Google gVisor, which stems from the presence of an information-countable vulnerability that could lead to an attacker being able to count information for use in...

PT-2025-1585 · WordPress · Tracking Code Manager

Name of the Vulnerable Software and Affected Versions: Tracking Code Manager WordPress plugin version 2.4.0 and earlier Description: The issue allows users with a role as low as Contributor to perform Cross-Site Scripting attacks due to the plugin not sanitizing and escaping some of its metabox...

WordPress plugin Tracking Code Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-1575 · Google · Gvisor

Name of the Vulnerable Software and Affected Versions: gVisor affected versions not specified Description: A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in trackin...

GHSA-98V2-F47X-89XW

creationtimestamp| type| source ---|---|--- 2025-01-29 11:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113911519035869184...

CVE-2025-0803

creationtimestamp| type| source ---|---|--- 2025-01-29 02:03:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113909183316922988 2025-01-29 02:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvm2bvrf2p 2025-01-29 03:15:07+00:00| seen|...

CVE-2023-33838

creationtimestamp| type| source ---|---|--- 2025-01-29 01:31:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113909056946227372 2025-01-29 02:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlk7kqu2n 2025-01-29 03:15:03+00:00| seen|...

CVE-2024-56529

creationtimestamp| type| source ---|---|--- 2025-01-28 22:35:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113908366252655454 2025-01-28 23:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtlj3xg6b2t 2025-01-29 01:10:14+00:00|...

CVE-2025-24800

creationtimestamp| type| source ---|---|--- 2025-01-28 15:43:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113906744458245865 2025-01-28 16:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsu4i3xjh2f 2025-01-28 18:47:17+00:00| seen|...

CVE-2024-13521

creationtimestamp| type| source ---|---|--- 2025-01-28 07:27:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113904796362962773 2025-01-28 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrzatxbew2c 2025-01-28 09:16:58+00:00| seen|...

CVE-2024-13509

creationtimestamp| type| source ---|---|--- 2025-01-28 06:44:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113904625829697666 2025-01-28 07:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrvuzn32q2n 2025-01-28 10:25:47+00:00| seen|...

CVE-2024-0149

creationtimestamp| type| source ---|---|--- 2025-01-28 04:06:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113904004084261756 2025-01-28 04:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrlsy6nve2i 2025-01-28 06:15:09+00:00| seen|...

CVE-2025-23094

creationtimestamp| type| source ---|---|--- 2025-01-28 03:57:11+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lgrkrtbk7k2f 2025-01-28 11:36:23+00:00| seen| https://t.me/CyberBulletin/2189 2025-01-28 13:30:09+00:00| seen| https://bsky.app/profile/bolhasec.com/post/3lgskskvvij2a...

Subaru STARLINK Flaw Enabled Remote Tracking and Control of Vehicles

Subaru STARLINK flaw exposed a critical security vulnerability, enabling unauthorized access to vehicle tracking, remote control, and sensitive…...

CVE-2024-56953

creationtimestamp| type| source ---|---|--- 2025-01-27 19:04:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113901873804835446 2025-01-27 19:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnvqnjl2t 2025-01-27 22:49:35+00:00| seen|...