🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2951 ‼

A vulnerability classified as critical has been found in code-projects Bus Dispatch and Information System 1.0. Affected is an unknown function of the file delete_bus.php. The manipulation of the argument busid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230112.

📖 Read

via "National Vulnerability Database".
👍1
822 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2014-125101 ‼

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The name of the patch is 58ed88243e17df766036f4857041edaf358076d3. It is recommended to upgrade the affected component. The identifier VDB-230085 was assigned to this vulnerability.

📖 Read

via "National Vulnerability Database".
👍2🔥1
808 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33216 ‼

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments woodiscuz-woocommerce-comments allows Stored XSS.This issue affects WooDiscuz – WooCommerce Comments: from n/a through 2.2.9.

📖 Read

via "National Vulnerability Database".
770 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33315 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <= 1.1.2 versions.

📖 Read

via "National Vulnerability Database".
736 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-32800 ‼

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions.

📖 Read

via "National Vulnerability Database".
❤1
729 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33926 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.

📖 Read

via "National Vulnerability Database".
720 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-31873 ‼

Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').

📖 Read

via "National Vulnerability Database".
❤1
717 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-32763 ‼

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.

📖 Read

via "National Vulnerability Database".
❤1
777 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-29380 ‼

Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.

📖 Read

via "National Vulnerability Database".
710 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-45372 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin <= 2.2.8 versions.

📖 Read

via "National Vulnerability Database".
750 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2954 ‼

Cross-site Scripting (XSS) - Stored in GitHub repository liangliangyy/djangoblog prior to master.

📖 Read

via "National Vulnerability Database".
723 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2955 ‼

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file rendered_report.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230142 is the identifier assigned to this vulnerability.

📖 Read

via "National Vulnerability Database".
752 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2808 ‼

Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

📖 Read

via "National Vulnerability Database".
720 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Top Cyberattacks Revealed in New Threat Intelligence Report 🕴

New report provides actionable intelligence about attacks, threat actors, and campaigns.

📖 Read

via "Dark Reading".
Dark Reading
Top Cyberattacks Revealed in New Threat Intelligence Report
New report provides actionable intelligence about attacks, threat actors, and campaigns.
❤1👍1
766 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-27613 ‼

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MonitorClick Forms Ada – Form Builder plugin <= 1.0 versions.

📖 Read

via "National Vulnerability Database".
667 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2962 ‼

A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edit_user. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230150 is the identifier assigned to this vulnerability.

📖 Read

via "National Vulnerability Database".
👍1
689 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-32696 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

📖 Read

via "National Vulnerability Database".
620 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-32711 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

📖 Read

via "National Vulnerability Database".
580 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-32735 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

📖 Read

via "National Vulnerability Database".
549 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-32722 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

📖 Read

via "National Vulnerability Database".
468 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-32677 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none.

📖 Read

via "National Vulnerability Database".
464 views