CVE-2018-16235

CVE-2018-16235 affects Telligent Community: 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725. The vulnerability is an XSS via the Feed RSS widget. The connected documents confirm the affected product family and versions but do not provide detailed...

CVE-2018-16235

Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget...

CVE-2018-16235: Improper Neutralization of Input During Web Page Generation

Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget...

PT-2018-13448

Name of the Vulnerable Software and Affected Versions Telligent Community versions 6.x through 9.x before 9.2.10.11796 Telligent Community versions 10.1.x before 10.1.10.11792 Telligent Community versions 10.2.x before 10.2.3.4725 Description The issue is related to a Cross-Site Scripting XSS...

GHSA-6CW8-7J6C-HCCP Moderate severity vulnerability that affects io.vertx:vertx-core

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response...

Which? Magazine recommends vulnerable smart home camera

You’ll already know that we have a keen interest in smart home camera security. Our recent work on Swann and FLIR cameras showed how it could be trivially easy to spy on people through their security cameras. Which? Magazine has a well-earned reputation for providing product reviews for consumers...

Unspecified Vulnerability in WordPress Feed Statistics Plugin

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Feed Statistics plugin is used in one of the tracking RSS statistics plugin. An unspecified vulnerability exists in t...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

Open redirect

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074

The CVE-2018-17074 entry concerns the WordPress Feed Statistics plugin prior to version 4.0, which contains an Open Redirect vulnerability via the feed-stats-url parameter. The issue allows attackers to redirect users to arbitrary URLs, potentially aiding phishing or credential theft in contexts ...

CVE-2018-17074

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

CVE-2018-17074: URL Redirection to Untrusted Site

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...

PT-2018-13879

Name of the Vulnerable Software and Affected Versions WordPress Feed Statistics plugin versions prior to 4.0 Description The issue allows for an Open Redirect via the feed-stats-url parameter. Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue...

CVE-2018-14847

creationtimestamp| type| source ---|---|--- 2018-09-04 08:51:50+00:00| seen| MISP/5b8e46ef-a8b4-4059-8c5c-4cc0950d210f 2018-09-04 16:19:46+00:00| exploited| https://t.me/SecLabNews/3063 2018-09-05 10:41:49+00:00| exploited| https://t.me/mtikpro/98 2018-09-05 16:12:57+00:00| exploited|...

Comparison of Open Source Adversary Emulation Tools

PenTestIT RSS Feed If you liked my older post titled "List of Adversary Emulation Tools", I am sure you must want to know what is the difference or comparison between the different tools. This post is an attempt to do just that -to list down the comparison of open source adversary emulation tools...

CVE-2018-15596

An issue was discovered in inc/classfeedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles within title elements of the generated XML documents aren't sanitized, leading to...

CVE-2018-15596

An issue was discovered in inc/classfeedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles within title elements of the generated XML documents aren't sanitized, leading to...

Unspecified Vulnerability in Eclipse Vert.x (CNVD-2019-43402)

Eclipse Vert.x is an Eclipse Foundation toolkit for building responsive applications on the JVM , which is mainly used to build applications such as network utilities , Web applications , HTTP/REST microservices and so on. A security vulnerability exists in Eclipse Vert.x that stems from the...