CVE-2019-11633

CVE-2019-11633 affects HoneyPress up to 2016-09-27. The vulnerability arises because fake WordPress templates embed unique hostnames (www.atxsec.com and ayylmao.wpengine.com), enabling attackers to fingerprint the honeypot and avoid it. The impact described is defensive fingerprinting rather than...

CVE-2018-11633

An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker via spear phishing/social engineering, the attacker can change the plugin settings. The function...

CVE-2018-11633

The CVE-2018-11633 issue affects the MULTIDOTS Woo Checkout for Digital Goods plugin for WordPress (version 2.1). The vulnerability stems from the function woo_checkout_settings_page in class-woo-checkout-for-digital-goods-admin.php not validating CSRF against wp-admin/admin-post.php and lacking ...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11633

The CVE-2017-11633 issue affects Wireless IP Camera 360 devices. Affected component: RTSP credential handling on the device. Root cause: remote attackers can read the InsertConnect field by connecting to TCP port 9527, leading to exposure of RTSP credentials. Publicly stated impact is credential ...