36252 matches found
CVE-2015-9415
The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...
CVE-2015-9414
WordPress WP Symposium plugin (
CVE-2015-9413
The CVE-2015-9413 issue affects the WordPress eShop plugin (versions up to 6.3.13). The vulnerability is a CSRF that can cause a reflected XSS via the parameter title in wp-admin/admin.php?page=eshop-downloads.php. The root cause is CSRF enabling an attacker to induce unintended requests that, un...
CVE-2015-9412
CVE-2015-9412 affects the WordPress plugin Royal-Slider (vulnerable: before 3.2.7). The issue is an XSS in the site’s admin UI via the rstype parameter when creating/editing a slider. Several connected sources corroborate: Red Hat and CNVD entries describe the same XSS in the Royal-Slider plugin;...
CVE-2015-9411
CVE-2015-9411 affects the WordPress Postmatic plugin prior to version 1.4.6. The vulnerability is Cross-Site Scripting (XSS) in the plugin, enabling potential client-side code execution. Remediation: upgrade to Postmatic 1.4.6 or later. Other connected sources corroborate the XSS issue for this p...
CVE-2015-9411
The Postmatic plugin before 1.4.6 for WordPress has XSS...
CVE-2015-9410
Summary: CVE-2015-9410 affects the Blubrry PowerPress Podcasting plugin for WordPress (version 6.0.4) with a Cross-Site Scripting (XSS) vulnerability exploitable via the tab parameter. Technical details across connected sources confirm an authenticated XSS path, with PoC instructions showing how ...
CVE-2015-9409
creationtimestamp| type| source ---|---|--- 2019-09-25 20:31:23+00:00| seen| https://t.me/cibsecurity/7006...
CVE-2015-9409
The CVE covers the WordPress alo-easymail plugin prior to 2.6.01, where CSRF leads to a resultant XSS in pages/alo-easymail-admin-options.php. Affected software: alo-easymail plugin (WordPress). Underlying issue: CSRF allowing XSS on the admin options page. Impact as stated: cross-site scripting ...
ABRT - sosreport Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT sosreport Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on RHEL systems with a vulnerable version o...
EulerOS 2.0 SP3 : patch (EulerOS-SA-2019-2004)
According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrar...
ABRT sosreport Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT sosreport Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on RHEL systems with a vulnerable version o...
EulerOS 2.0 SP5 : foomatic (EulerOS-SA-2019-1964)
According to the versions of the foomatic packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that foomatic-rip failed to remove all shell special characters from inputs used to construct command lines for external...
CVE-2015-9392
creationtimestamp| type| source ---|---|--- 2019-09-20 20:31:52+00:00| seen| https://t.me/cibsecurity/6923...
CVE-2015-9393
creationtimestamp| type| source ---|---|--- 2019-09-20 20:31:51+00:00| seen| https://t.me/cibsecurity/6922...
CVE-2015-9394
creationtimestamp| type| source ---|---|--- 2019-09-20 20:31:50+00:00| seen| https://t.me/cibsecurity/6921...
CVE-2015-9395
creationtimestamp| type| source ---|---|--- 2019-09-20 20:31:46+00:00| seen| https://t.me/cibsecurity/6920...
CVE-2015-9397
creationtimestamp| type| source ---|---|--- 2019-09-20 20:31:41+00:00| seen| https://t.me/cibsecurity/6918...