Security
Headlines
HeadlinesLatestCVEs

Tag

#vulnerability

WordPress Bricks Builder Theme 1.9.6 Code Injection

WordPress Bricks Builder Theme version 1.9.6 suffers from a PHP code injection vulnerability.

Packet Storm
Open in Source
#vulnerability#windows#google#js#wordpress#php#auth#firefox
WordPress Hash Form 1.1.0 Code Injection

WordPress Hash Form plugin version 1.1.0 suffers from a PHP code injection vulnerability.

WordPress GiveWP Donation Fundraising Platform 3.14.1 Code Injection

WordPress GiveWP Donation Fundraising Platform version 3.14.1 suffers from a PHP code injection vulnerability.

ViciDial 2.0.5 Cross Site Request Forgery

ViciDial version 2.0.5 suffers from a cross site request forgery vulnerability.

Vehicle Service Management System 1.0 Cross Site Request Forgery

Vehicle Service Management System version 1.0 suffers from a cross site request forgery vulnerability.

Transport Management System 1.0 Insecure Direct Object Reference

Transport Management System version 1.0 suffers from an insecure direct object reference vulnerability.

Printing Business Records Management System 1.0 Insecure Settings

Printing Business Records Management System version 1.0 suffers from an ignored default credential vulnerability.

Online Eyewear Shop 1.0 Insecure Settings

Online Eyewear Shop version 1.0 suffers from an ignored default credential vulnerability.

AVideo 12.4 Code Injection

AVideo version 12.4 suffers from a PHP code injection vulnerability.

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

Organizations that get relieved of credentials to their cloud environments can quickly find themselves part of a disturbing new trend: Cybercriminals using stolen cloud credentials to operate and resell sexualized AI-powered chat services. Researchers say these illicit chat bots, which use custom jailbreaks to bypass content filtering, often veer into darker role-playing scenarios, including child sexual exploitation and rape.