The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL Injection via the 'events' attribute of the 'mp-timetable' shortcode in all versions up to, and including, 2.4.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Security Links is a curated list of websites for cybersecurity. Find cutting edge information and trends.


LATEST NEWS
thumb
2024-05-15 17:00:25Google unveils new Android 15 security updates: What you need to know

Google''s helping you fight scammers and snoops.

by ZDNET Security




PICKUP

IT Security Guru is the home of IT Security and Cybersecurity news in the UK, Europe and the World. Get the latest industry news and articles here.

Blog from Adam Chester, Hacker and InfoSec Researcher.


RECENTLY ADDED

Browse the largest dark web index on the internet. Search Onion sites via fulltext queries and browse them via Tor compatible browser (Brave or Tor Browser, ...).

The Forensics Wiki has transitioned to this new domain and platform; read more about it at Transitioning Forensics Wiki to GitHub.

TIPS & GUIDANCE Ransomware incidents can severely impact business processes and leave organizations without the data they need to operate and deliver.

Read and watch the latest news, multimedia, and other important communications from CISA. View a calendar of upcoming events CISA hosts and participates in.

Keeping You Informed. Keeping You Aware. Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Scammers are ruthless, and that is why I am here. My channel is all about bringing awareness to this critical problem with humor and fun. We will learn a lot of things along the way and if I help one person through this, it will be worth it.

Expert insight, best practices, and advice on Secure DevOps, security for containers, Kubernetes, and cloud services. Review Sysdig blog posts today!

The community dedicated to learning hardware.

All the latest news and insights about cybersecurity from Hack The Box. Hacking trends, insights, interviews, stories, and much more.

Hackyx is a search engine for cybersecurity. The aim of this project is to easily find any resource related to IT security like CTF writeups, articles or Bug Bounty reports.