-
Despite cyberattacks, water security standards remain a pipe dream
It sounds like the start of a bad joke: Digital trespassers from China, Russia, and Iran break into US water …
-
Hackers Threaten to Leak Planned Parenthood Data
Your devices may be revealing a lot more about your life than you realize. During the Democratic National Convention in Chicago last month, …
-
Protect AI Democratizes AI Security Training with Free MLSecOps Foundations Online Learning Course
Protect AI, a leading artificial intelligence (AI) and machine learning (ML) security company, announced the availability of MLSecOps …
-
North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams
Threat actors affiliated with North Korea have been observed leveraging LinkedIn as a way to target developers as part of a fake job …
-
FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals
Two men have been indicted in the U.S. for their alleged involvement in managing a dark web marketplace called WWH Club that specializes in …
-
CVE-2024-7620 – The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads …
The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the …
-
CVE-2024-7112 – The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is …
The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘schedule’ …
-
CVE-2024-6010 – The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation …
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.1.96. This …
-
CVE-2024-1596 – The Ninja Forms – File Uploads plugin for WordPress is vulnerable to Stored Cross-Site …
The Ninja Forms – File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. RTX file) in …
-
CVE-2024-8538 – The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is …
The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in all versions up …
-
CVE-2024-8523 – A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by …
A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the function formatData of the file …
-
CVE-2024-6849 – The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable …
The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File …
●●●
NVD
- CVE-2024-7620 – The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads …
- CVE-2024-8521 – A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. …
- CVE-2024-45034 – Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to …
- CVE-2024-45498 – Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has …
- CVE-2024-6849 – The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable …
EXPLOITS
- Invesalius3 – Remote Code Execution
- Gitea 1.22.0 – Stored XSS
- NoteMark < 0.13.0 - Stored XSS
- Windows TCP/IP – RCE Checker and Denial of Service
- Aurba 501 – Authenticated RCE
SECURELIST