blogVault 1.05 - admin.php blogVault Key Setting CSRF

The Backup & Staging – BlogVault Backups WordPress plugin was affected by an admin.php blogVault Key Setting CSRF security vulnerability...

IndiaNIC FAQs Manager 1.0 - FAQ Setting Manipulation CSRF

The faqs-manager WordPress plugin was affected by a FAQ Setting Manipulation CSRF security vulnerability...

IndiaNIC Testimonial 2.2 - Setting Manipulation CSRF

The Testimonial WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

SexyBookmarks - Setting Manipulation CSRF

The sexybookmarks WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

WP Maintenance Mode 1.8.7 - Setting Manipulation CSRF

The WP Maintenance Mode WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Stream Video Player <= 1.4.0 - Setting Manipulation CSRF

The Stream Video Player WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

qTranslate 2.5.34 - Setting Manipulation CSRF

The qtranslate WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

FunCaptcha 0.3.2- Setting Manipulation CSRF

The funcaptcha WordPress plugin was affected by security vulnerability...

WP-Print 2.51 - Setting Manipulation CSRF

The WP-Print WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Top 10 <= 1.9.2 - Setting Manipulation CSRF

The Top 10 – Popular posts plugin for WordPress WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Better Search < 1.3 - admin.inc.php Setting Manipulation CSRF

The Better Search WordPress plugin 1.2.1 and below was affected by an admin.inc.php Setting Manipulation CSRF security vulnerability...

Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability

From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...

Host Header Poisoning - ownCloud

Due to trusting user supplied input and interpret it as Host header an attacker is able to craft a password reset mail with a link pointing to his own site. If a user clicks on the link or a software e.g. antivirus is accessing the link the attacker is able to reset the user password. Affected...

Family Connections CMS 2.5.0 & 2.7.1 - (less.php) Remote Command Execution

No description provided by source. ?php / Family connections CMS v2.5.0-v2.7.1 remote command execution exploit vendor: https://www.familycms.com/ software link: https://www.familycms.com/download.php author: mrme::rwx kru email: steventhomasseeley!gmail!com ----------------------------------...

Joomla JE Media Player Component LFI Vulnerability

No description provided by source. Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15.00 Author : Sid3^effec...

Plesk < 9.5.4 - Zeroday Remote Exploit

No description provided by source. Plesk Apache zeroday / June 2013 discovered & exploited by kingcope this Plesk configuration setting makes it possible: scriptAlias /phppath/ /usr/bin/ Furthermore this is not cve-2012-1823 because the php interpreter is called directly. no php file is called...

2Wire Routers - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

Advanced Guestbook 2.2/2.3 User-Agent HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14391/info Advanced Guestbook is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

IBM Algorithmics RICOS 4.5.0 4.7.0 - Multiple Vulnerabilities

IBM Algorithmics RICOS 4.5.0 4.7.0 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple severe vulnerabilities product: IBM Algorithmics RICO...

SuperH (sh4) Add root user with password

No description provided by source. / Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor -...