CVE-2024-4706 - How a Simple XSS Flaw in WordPress Plugin "Microsoft Office 365 / Azure AD | LOGIN" Exposes Sites
WordPress is no stranger to vulnerabilities, but CVE-2024-4706 is a fresh exploit that doesn’t need a security expert to understand — just a little knowledge
CVE-2024-3648 - Exploiting Stored XSS in ShareThis Share Buttons WordPress Plugin (Up to v2.3.)
A significant security vulnerability has been discovered in the popular ShareThis Share Buttons WordPress plugin. Identified as CVE-2024-3648, this flaw allows attackers with basic contributor
CVE-2024-4835 - XSS Vulnerability in GitLab Exposes Sensitive User Information
*Published: June 2024 | Severity: High | Affects: GitLab (15.11 before 16.10.6, 16.11 before 16.11.3, 17. before 17..1)*
GitLab is
CVE-2024-2874 - Disrupting GitLab with Crafted Runner Descriptions – An In-Depth Exploit Guide
---
Introduction
Earlier this year, security researchers disclosed a vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE) that could let malicious actors disrupt
CVE-2024-3918 - Stored XSS in “Pet Manager” WordPress Plugin (v1.4 and Below) — Exploitation in Detail
WordPress plugins are a key target for hackers. This long read explores CVE-2024-3918, a serious vulnerability found in the “Pet Manager” plugin for WordPress, up
Episode
00:00:00
00:00:00