Unauthenticated SQL Injection Vulnerability Patched in WordPress Statistics Plugin

On February 7, 2022, Security Researcher Cyku Hong from DEVCORE reported a vulnerability to us that they discovered in WP Statistics, a WordPress plugin installed on over 600,000 sites. This vulnerability made it possible for unauthenticated attackers to execute arbitrary SQL queries by appending...

CVE-2021-41864 affecting package kernel 5.10.189.1-1

CVE-2021-41864 affecting package kernel 5.10.189.1-1. A patched version of the package is available...

gac.canadiana.ca Cross Site Scripting vulnerability

Security Researcher kun-fly Helped patch 577 vulnerabilities Received 7 Coordinated Disclosure badges Received 40 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting gac.canadiana.ca website and its users. Following coordinat...

ibidi.com XSS vulnerability

Vulnerable URL: https://ibidi.com/search?controller=search=position=descquery=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3Esearch= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 489267 VIP website...

webmail.bait.net.pl Open Redirect vulnerability

Vulnerable URL: http://webmail.bait.net.pl/horde/util/go.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.09.2017 Latest check for patch:| 21.09.2017 13:57 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

reservations.mahan.aero XSS vulnerability

Vulnerable URL: http://reservations.mahan.aero/ibe/public/showFlightSchedule.action?startDate=05%2F2014=THR=KSH=true〈=fa";alert'OPENBUGBOUNTY';=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:12 GMT Vulnerability type:| XSS Vulnerability...

kidzsearch.com XSS vulnerability

Vulnerable URL: http://www.kidzsearch.com/kzimagesearch.php?q=%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=1409465098=imagebox-kids=%22%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E.VdMCbfnGPAg Details: Description| Value ---|--- Patched:| Yes, at 13.01.2018 Latest check for...