Aggregator

A vulnerability classified as problematic has been found in Lilaea Media IntelliWidget Elements Plugin up to 2.2.7 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-51912. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Gopi Ramasamy Drop in Image Slideshow Gallery Plugin up to 12.0 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-51914. The attack can be launched remotely. There is no exploit available.

A newly disclosed vulnerability in the Exim mail transfer agent (CVE-2025-26794) has sent shockwaves through the cybersecurity community, revealing a critical SQL injection flaw that enables attackers to compromise email systems and manipulate underlying databases.  The vulnerability, confirmed in Exim Version 4.98 installations using SQLite for hints databases, represents one of the most severe email […]

The post Exim Mail Transfer Vulnerability Allows Attackers to Inject Malicious SQL appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as problematic, has been found in Huy Le Multiple Votes in One Page Plugin up to 1.0.4 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-51917. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Freshlight Lab Pay With Stripe Plugin up to 1.2.1 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-51918. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in JDev Map Store Locator Plugin up to 1.2.1 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-51920. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Midori Scrollup Plugin up to 1.1 on WordPress and classified as problematic. This issue affects some unknown processing of the component During Web Page. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-51921. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Atlassian Sourcetree on macOS/Windows. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to Remote Code Execution. This vulnerability is handled as CVE-2024-21697. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Google Android 6/6.0.1/7/8/8.1. Affected is the function SMF_ParseMetaEvent of the file eas_smf.c. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2018-9348. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Alexandre Magno WP Agenda Plugin up to 2.0 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-51924. The attack can be initiated remotely. There is no exploit available.

快速浏览！2025.2.17—2.23安全动态周回顾。

嘶吼2025网络安全产业图谱调研进行中！

In this Help Net Security interview, Aaron Roberts, Director at Perspective Intelligence, discusses how automation is reshaping threat intelligence. He explains that while AI tools can process massive data sets, the nuanced judgment of experienced analysts remains critical. Roberts also offers insights on best practices for integrating automated systems, ensuring explainability, and addressing ethical challenges in cybersecurity. Many organizations are increasing their reliance on AI-driven security tools. In your experience, where does automation provide the … More →

The post Man vs. machine: Striking the perfect balance in threat intelligence appeared first on Help Net Security.

哥伦布写道:
1955年2月24日，史蒂夫·乔布斯出生于旧金山，被保罗和克拉拉·乔布斯收养。1970年代初，他遇到了重要的合作伙伴史蒂夫·沃兹尼亚克，开启了改变世界的创业旅程。1976年，他们在车库创立苹果公司，推出的Apple II成为首款成功进入家庭的个人电脑。1985年离开苹果后，他创建NeXT，收购皮克斯。1997年重返苹果后，陆续推出iMac、iPod和iPhone等革命性产品，将科技与艺术完美融合。2011年，他因胰腺癌离世。看到如今的苹果，让我们倍加怀念这位硅谷传奇。​​​​​​​​​​​​​​​​

A vulnerability was found in Maruf Arafat VP Sitemap Plugin up to 1.0 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-51922. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Codember Rig Elements for Elementor Plugin up to 1.0 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-51927. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Sazzad Hu Testimonial Slider Shortcode Plugin up to 1.1.9 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-51925. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Websand Subscription Form Plugin up to 1.0.3 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-51923. The attack may be launched remotely. There is no exploit available.