3459 matches found
CBP Wants New Tech to Search for Hidden Data on Seized Phones
Customs and Border Protection is asking companies to pitch tools for performing deep analysis on the contents of devices seized at the US border...
Scammers Use Microsoft 365 Direct Send to Spoof Emails Targeting US Firms
Scammers are exploiting Microsoft 365 Direct Send to spoof internal emails targeting US firms bypassing security filters with…...
Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams
The US Justice Department revealed the identity theft number along with one arrest and a crackdown on “laptop farms” that allegedly facilitate North Korean tech worker impersonators across the US...
ICE Rolls Facial Recognition Tools Out to Officers' Phones
Plus: US feds charge alleged masterminds behind infamous forum, Scattered Spider targets airlines, and hackers open a valve at a Norwegian dam...
WhatsApp Adds AI-Powered Message Summaries for Faster Chat Previews
Popular messaging platform WhatsApp has added a new artificial intelligence AI-powered feature that leverages its in-house solution Meta AI to summarize unread messages in chats. The feature, called Message Summaries, is currently rolling out in the English language to users in the United States,...
WordPress Contact Us Page - Contact People plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Contact Us Page - Contact People plugin, which stems from insufficient input cleanup and escaping, and can be...
What Satellite Images Reveal About the US Bombing of Iran's Nuclear Sites
The US concentrated its attack on Fordow, an enrichment plant built hundreds of feet underground. Aerial photos give important clues about what damage the “bunker-buster” bombs may have caused...
Truth Social Crashes as Trump Live-Posts Iran Bombing
The social network started experiencing global outages within minutes of Donald Trump posting details of a US military strike on Iran...
CVE-2025-6344 code-projects Online Shoe Store contactus.php sql injection
A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit...
Scattered Spider Aims at US Insurers After UK Retail Hit, Google Warns
Scattered Spider targets US insurance firms after UK retail attacks, using social engineering to breach help desks and disrupt services, Google warns...
CVE-2025-40674: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS in osCommerce v4. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the name of any parameter in /watch/en/about-us. This vulnerability can be exploited to steal sensitive user...
WordPress Contact Us Page – Contact People plugin <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via style Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Contact Us page - Contact people LITE versions = 3.7.4...
CVE-2025-5123 Contact Us Page – Contact People <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter
The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2025-25372 · WordPress · Contact Us Page – Contact People
Name of the Vulnerable Software and Affected Versions: Contact Us Page – Contact People plugin for WordPress versions up to, and including, 3.7.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping via the style parameter. Th...
WordPress plugin Contact Us Page – Contact People 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Contact Us Page - Contact People plugin, which stems from insufficient input cleanup and escaping, and can be...
CVE-2025-5123: Improper Neutralization of Input During Web Page Generation
The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
NICKNAME: Zero-Click iMessage Exploit Targeted Key Figures in US, EU
iVerify's NICKNAME discovery reveals a zero-click iMessage flaw exploited in targeted attacks on US & EU high-value individuals…...
The US Grid Attack Looming on the Horizon
A major cyberattack on the US electrical grid has long worried security experts. Such an attack wouldn’t be easy. But if an adversary pulled it off, it’d be lights out in more ways than one...