A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Key ...
Continue Reading
01 марта, 2023
The plugin has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client. ### PoC The PoC will be displayed ...
Continue Reading
28 февраля, 2023
The plugin has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.Read More ...
Continue Reading
28 февраля, 2023
The plugin does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitra ...
Continue Reading
28 февраля, 2023
The plugin does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitra ...
Continue Reading
28 февраля, 2023
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High Script Security Plugin provides a s ...
Continue Reading
28 февраля, 2023
[]() Spoiler Alert: Organizations with 10,000 SaaS users that use ...
Continue Reading
27 февраля, 2023
Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as [Wordfence Intelligence Community Edition](). This database i ...
Continue Reading
23 февраля, 2023
Back to Main
