CVE-2018-10084: Use of a Broken or Risky Cryptographic Algorithm

CMS Made Simple CMSMS through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the effuid value within $COOKIE$this-loginkey to equal 1, because an SHA-1 cryptographic protection mechanism can be bypassed...

letsendorse.com XSS vulnerability

Open Bug Bounty ID: OBB-591998 Description| Value ---|--- Affected Website:| letsendorse.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-0013

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting XSS attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value a...

PT-2018-4116

Name of the Vulnerable Software and Affected Versions Ember.js versions 1.0.x through 1.0.0, 1.1.x through 1.1.2, 1.2.x through 1.2.0, 1.3.x through 1.3.0, and 1.4.x through 1.4.0-beta.1 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks by leveraging an...

WordPress Share This Image plugin <=1.03 - Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Share This Image plugin versions =1.03. Solution Update the WordPress Share This Image plugin to the latest available version at least 1.04...

WordPress ILLID Share This Image plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.ILLID Share This Image plugin is used to add a social sharing icon plugin. A cross-site scripting vulnerability...

Code injection

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

CVE-2017-18015

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

CVE-2017-18015

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

CVE-2017-18015

The CVE-2017-18015 entry concerns the WordPress plugin ILLID Share This Image (versions prior to 1.04). The underlying issue is a Cross-Site Scripting (XSS) flaw exploitable through the sharer.php URL parameter. Affected component: the Share This Image plugin for WordPress; root cause per the sou...

CVE-2017-18015

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

PT-2018-6611 · Illid · Illid Share This Image

Name of the Vulnerable Software and Affected Versions: ILLID Share This Image plugin versions prior to 1.04 Description: The issue concerns a cross-site scripting XSS flaw. It is exploited via the sharer.php url parameter. Recommendations: For versions prior to 1.04, update to version 1.04 or lat...

CVE-2017-18015: Improper Neutralization of Input During Web Page Generation

The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter...

Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit

Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...

WordPress Share This Image 1.03 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

WordPress Share This Image 1.03 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Share This Image 1.03 Share This Image is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script co...

Share This Image <= 1.03 - Cross-Site Scripting (XSS)

The Share This Image WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WEM 4.3 -Folder redirection discrepancy between "Quick Access" and "This PC"

When configuring WEM USV Settings for folder redirection inside WEM Administration Console, folder redirection settings are not properly applied per settings on WEM Agent machine. FOR EXAMPLE: All of the following folders, should be redirected and have been configured this way via the WEM...

mora.edu.mx XSS vulnerability

Open Bug Bounty ID: OBB-311248 Description| Value ---|--- Affected Website:| mora.edu.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Plugin I-Recommend-This SQL Injection

An SQL injection vulnerability has been reported in WordPress I-Recommend-This Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...