CVE-2024-4706 - How a Simple XSS Flaw in WordPress Plugin "Microsoft Office 365 / Azure AD | LOGIN" Exposes Sites
WordPress is no stranger to vulnerabilities, but CVE-2024-4706 is a fresh exploit that doesn’t need a security expert to understand — just a little knowledge
CVE-2024-5241 - Critical Command Injection in Huashi Private Cloud CDN Live Streaming Acceleration Server Explained
A critical vulnerability, CVE-2024-5241, was found in the Huashi Private Cloud CDN Live Streaming Acceleration Server (versions up to 20240520). This security flaw allows a
CVE-2024-5240 - Campcodes Complete Web-Based School Management System 1. Unread Messages SQL Injection Vulnerability
A critical vulnerability has been identified in the Campcodes Complete Web-Based School Management System 1.. This vulnerability is an SQL injection that affects the file
CVE-2024-3648 - Exploiting Stored XSS in ShareThis Share Buttons WordPress Plugin (Up to v2.3.)
A significant security vulnerability has been discovered in the popular ShareThis Share Buttons WordPress plugin. Identified as CVE-2024-3648, this flaw allows attackers with basic contributor
CVE-2024-4835 - XSS Vulnerability in GitLab Exposes Sensitive User Information
*Published: June 2024 | Severity: High | Affects: GitLab (15.11 before 16.10.6, 16.11 before 16.11.3, 17. before 17..1)*
GitLab is
Episode
00:00:00
00:00:00