WordPress plugin Subscribe to Comments 'options-general.php' local file inclusion vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A local file inclusion vulnerability exists in the WordPress plugin Subscribe to Comments 'options-general.php'. Because the...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the sub-component “tool/monitor subscribe” in the Moodle learning management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information due to errors in the subscription process...

tps.su XSS vulnerability

Vulnerable URL:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution Vulnerabilities

Exploit for php platform in category web applications Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report:...

WordPress Subscribe To Comments 2.1.2 LFI / Code Execution

Details ================ Software: Subscribe to Comments Version: 2.1.2 Homepage: http://wordpress.org/plugins/subscribe-to-comments/ Advisory report: https://security.dxw.com/advisories/admin-only-local-file-inclusion-and-arbitrary-code-execution-in-subscribe-to-comments-2-1-2/ CVE: Awaiting...

WordPress Subscribe to Comments Plugin <= 2.1.2 - Local File Inclusion

Because of this vulnerability, administrators can upload PHP files, also, they can perform arbitrary code execution by the same method. Solution Update the plugin...

WordPress MailChimp Subscribe Forms PHP Code Execution

A PHP code execution vulnerability has been reported in Wordpress plugin MailChimp Subscribe Forms. The vulnerability is due to insufficient validation of user-controlled email address when handling subscribe requests. An unauthenticated remote attacker can exploit this vulnerability by sending a...

WordPress MailChimp Subscribe Forms Plugin 1.1 - Remote Code Execution

MailChimp Subscribe Forms plugin is prone to a remote code execution vulnerability via "email" field. Solution Upgrade the plugin...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution Vulnerability

WordPress MailChimp Subscribe Forms plugin version 1.1 suffers from a remote code execution vulnerability. Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/...

WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution

Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/ Software Link: https://downloads.wordpress.org/plugin/mailchimp-subscribe-sm.1.1.zip Version: 1.1 Tested on:...

WordPress Mail Subscribe List Plugin <= 2.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

Digium Asterisk res_pjsip_pubsub Module SIP SUBSCRIBE Type Confusion Denial of Service (CVE-2014-6609)

A denial of service vulnerability exists in Asterisk Open Source. The vulnerability is due to the way SIP SUBSCRIBE requests with unexpected mixes of headers for a given event package are handled. Remote, unauthenticated attackers could exploit this vulnerability by sending malformed SIP SUBSCRIB...

MailChimp Subscribe Form <= 1.1 - Email Field Remote PHP Code Execution

Remote Code Execution via email field...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

CVE-2014-6609

The CVE-2014-6609 issue affects Asterisk Open Source 12.x prior to 12.5.1, where the res_pjsip_pubsub module allows remote authenticated users to crash the server by sending crafted SIP SUBSCRIBE requests with mixed headers for a given event package. This results in a denial of service. Root caus...

CVE-2014-6609

The respjsippubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package...

'The Hacker News' Celebrating its 4th Anniversary

Dear THN Readers, 'The Hacker News' is celebrating its 4th Anniversary today and we would like to thank every single Hacker, Researcher, Journalist, Enthusiast who has contributed to our phenomenal growth. When we began our journey 4 years back as a Small Local Community of few Hackers and Securi...

UBUNTU-CVE-2014-6251

Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request...