Reflected Cross Site Scripting News Today

By Maciej Domanski, Travis Peters, and David Pokora We identified 10 security vulnerabilities within the caddy-security plugin for the Caddy web server that could enable a variety of high-severity attacks in web applications, including client-side code execution, OAuth replay attacks, and unauthorized access to resources. During our evaluation, Caddy was deployed as a reverse proxy…

The newest WordPress patch includes fixes for 8 Medium-Severity security issues, several of which are trivial to exploit.WordPress Core 6.3.2 was released today, on October 12, 2023. It includes a number of security fixes and additional hardening against commonly exploited vulnerabilities. While all of the vulnerabilities are of Medium severity, several of them are impactful

SEC Consult Vulnerability Lab Security Advisory < 20230927-0 >=======================================================================title: Multiple Vulnerabilitiesproduct: SAP® Enable Now Managervulnerable version: 10.6.5 (Build 2804) Cloud Editionfixed version: May 2023 ReleaseCVE number: N/A (cloud)impact: highhomepage: https://www.sap.com/about.htmlfound: 2022-10-21by: Paul Serban (Eviden)Fabian Hagg (Office Vienna)SEC Consult Vulnerability LabAn integrated part of SEC Consult, an Evi...

SEC Consult Vulnerability Lab Security Advisory < 20230829-0 >=======================================================================title: Reflected Cross-Site Scripting (XSS)product: PTC - Codebeamer (ALM Solution)vulnerable version: =21.09-SP14CVE number: CVE-2023-4296impact: highhomepage: https://www.ptc.com/en/products/codebeamerfound: 2023-04-14by: Niklas Schilling (Office Munich)SEC Consult Vulnerability LabAn integrated part of SEC Consult, an Eviden businessEurope | Asiahttps://ww...

---------------------------------------------------------------------------CrafterCMS