6275 matches found
CVE-2017-2195: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
Foscam camera RtspServer Denial of Service Vulnerability
Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A denial of service vulnerability exists in Foscam camera RtspServer, where RtspServer crashes due to an out-of-memory read due to a negative number being incorrectly...
WordPress Multi Feed Reader Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Multi Feed Reader is one of the components used to create RSS feed templates. A SQL injection vulnerability exists in Mult...
JVN#98617234: WordPress plugin "Multi Feed Reader" vulnerable to SQL injection
The WordPress plugin "Multi Feed Reader" contains an SQL injection vulnerability CWE-89. Impact An attacker who can access the product may execute an arbitrary SQL command. Information stored in the database may be obtained or altered by an attacker. Solution Update the plugin Update the plugin...
Bypass Access Restrictions
Moodle is vulnerable to access restrictions being bypassed. Authenticated users can leverage the student role to bypass access restrictions and read the RSS feed for a forum. This is possible because mod/forum/rsslib.php does not correctly implement the requirement for posting before reading a Q...
Rockstar Games: Stored XSS in profile activity feed messages
The researcher was able to demonstrate a Stored XSS vulnerability in the Profile and Crew Feed endpoints. The exploit string worked because the researcher realized that certain obscure characters were not being converted to HTML entities properly. The exploit string was †‡•＜img src=a...
Google I/O 2017 application for Android has an unspecified vulnerability
Google I/O 2017 application for Android is a conference management application for Google's annual I/O conference based on the Android platform developed by Google USA. A security vulnerability exists in versions of the Google I/O 2017 application for Android-based platforms prior to 5.1.4, due t...
Beers with Talos Podcast Now Available
The first episodes of Beers with Talos are now available on iTunes and directly on talosintelligence.com/podcasts.When Talos decided to make a threat intelligence podcast, we wanted to make it different than your typical buttoned down, subdued security podcast. The BWT crew: Craig, Joel, a...
CVE-2017-0149
creationtimestamp| type| source ---|---|--- 2017-05-13 18:29:01+00:00| seen| https://t.me/webamoozir/1775 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 23:27:03+00:00| seen| https://t.me/arpsyndicate/1332 2024-12-24 20:31:25+00:00| seen|...
CVE-2016-4885
Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2016-4885
Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2016-4885
Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2016-4885
CVE-2016-4885 is a cross-site request forgery (CSRF) vulnerability in baserCMS and its Feed plugin (version 3.0.10 and earlier). When the Feed plugin is enabled, a logged-in administrator who visits a malicious URL can be forced to perform unintended operations on the baserCMS server, hijacking a...
CVE-2016-4885: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
PT-2017-8582
Name of the Vulnerable Software and Affected Versions baserCMS plugin Feed versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. This is achieved via unspecified vectors. Recommendations For baserCMS...
CVE-2017-6862
creationtimestamp| type| source ---|---|--- 2017-05-11 18:16:06+00:00| seen| https://t.me/webamoozir/1752 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 12:33:51+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:03+00:00| seen...
CVE-2017-0263
creationtimestamp| type| source ---|---|--- 2017-05-09 18:26:18+00:00| seen| MISP/59120865-27e0-4e6d-9b74-4a9f950d210f 2017-05-20 11:22:46+00:00| seen| https://t.me/canyoupwnme/1426 2018-02-21 07:47:18+00:00| seen| MISP/5a8d2377-208c-4330-908f-4818950d210f 2018-04-13 13:08:50+00:00|...
Mozilla: Sandbox escape through internal feed reader APIs (MFSA 2017-12)
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...
CVE-2017-5455
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...
CVE-2017-5455
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR 52.1 and Firefox 53...