‼ CVE-2022-36034 ‼
📖 Read
via "National Vulnerability Database".
nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of `{{` and with many repetitions of `{{|`. This issue has been patched in all versions above `0.2.5`. There are currently no known workarounds.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36033 ‼
📖 Read
via "National Vulnerability Database".
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default `SafeList.preserveRelativeLinks` option is enabled, HTML including `javascript:` URLs that have been crafted with control characters will not be sanitized. If the site that this HTML is published on does not set a Content Security Policy, an XSS attack is then possible. This issue is patched in jsoup 1.15.3. Users should upgrade to this version. Additionally, as the unsanitized input may have been persisted, old content should be cleaned again using the updated version. To remediate this issue without immediately upgrading: - disable `SafeList.preserveRelativeLinks`, which will rewrite input URLs as absolute URLs - ensure an appropriate [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP) is defined. (This should be used regardless of upgrading, as a defence-in-depth best practice.)📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27546 ‼
📖 Read
via "National Vulnerability Database".
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27558 ‼
📖 Read
via "National Vulnerability Database".
HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.📖 Read
via "National Vulnerability Database".
🔏 Consumer Financial Protection Bureau Reasserts Importance of Data Protection 🔏
📖 Read
via "".
Organizations with poor data security could be found in violation of the Consumer Financial Protection Act's prohibition on unfair acts or practices.📖 Read
via "".
🕴 Receipt for €8M iOS Zero-Day Sale Pops Up on Dark Web 🕴
📖 Read
via "Dark Reading".
Documents appear to show that Israeli spyware company Intellexa sold a full suite of services around a zero-day affecting both Android and iOS ecosystems.📖 Read
via "Dark Reading".
Dark Reading
Receipt for €8M iOS Zero-Day Sale Pops Up on Dark Web
Documents appear to show that Israeli spyware company Intellexa sold a full suite of services around a zero-day affecting both Android and iOS ecosystems.
🤯2
‼ CVE-2022-2261 ‼
📖 Read
via "National Vulnerability Database".
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2537 ‼
📖 Read
via "National Vulnerability Database".
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2267 ‼
📖 Read
via "National Vulnerability Database".
The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users (such as subscriber) to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2080 ‼
📖 Read
via "National Vulnerability Database".
The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any authenticated user to send messages to arbitrary private conversation via a IDOR attack. Note: Attackers are not able to see responses/messages between the teacher and student📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2638 ‼
📖 Read
via "National Vulnerability Database".
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2599 ‼
📖 Read
via "National Vulnerability Database".
The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2034 ‼
📖 Read
via "National Vulnerability Database".
The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private messages sent to teachers📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2373 ‼
📖 Read
via "National Vulnerability Database".
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36036 ‼
📖 Read
via "National Vulnerability Database".
mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was patched in version(s) 1.3.0 and 2.0.0-rc2. There are currently no known workarounds.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1663 ‼
📖 Read
via "National Vulnerability Database".
The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36037 ‼
📖 Read
via "National Vulnerability Database".
kirby is a content management system (CMS) that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting (XSS) is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim. If bad actors gain access to your group of authenticated Panel users they can escalate their privileges via the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. The multiselect field allows selection of tags from an autocompleted list. Unfortunately, the Panel in Kirby 3.5 used HTML rendering for the raw option value. This allowed **attackers with influence on the options source** to store HTML code. The browser of the victim who visited a page with manipulated multiselect options in the Panel will then have rendered this malicious HTML code when the victim opened the autocomplete dropdown. Users are *not* affected by this vulnerability if you don't use the multiselect field or don't use it with options that can be manipulated by attackers. The problem has been patched in Kirby 3.5.8.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1123 ‼
📖 Read
via "National Vulnerability Database".
The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2374 ‼
📖 Read
via "National Vulnerability Database".
The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2556 ‼
📖 Read
via "National Vulnerability Database".
The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for example📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2559 ‼
📖 Read
via "National Vulnerability Database".
The Fluent Support WordPress plugin before 1.5.8 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection vulnerability exploitable by high privilege users📖 Read
via "National Vulnerability Database".