189 matches found
CVE-2019-15776
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...
WordPress 404-to-301 Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. 404-to-301 is a plugin used to redirect 404 pages to other pages. The WordPress 404-to-301 plugin suffers from a SQL injection...
Sql injection
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection...
CVE-2015-9323
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection...
CVE-2015-9323
The CVE-2015-9323 entry corresponds to a vulnerability in the WordPress plugin 404-to-301 (Redirect, Log and Notify 404 Errors). Affected versions are before 2.0.3, with an Authenticated Blind SQL Injection vulnerability in the plugin’s code path. Exploitation is described as authenticated (requi...
WordPress Simple 301 Redirects Addon Bulk Uploader plugin <= 1.2.4 - Unauthenticated option changes and other security issues
Unauthenticated option changes and other security issues found by Jerome Bruandet Nintechnet in WordPress Simple 301 Redirects Addon Bulk Uploader plugin versions = 1.2.4. Solution Update the WordPress Simple 301 Redirects Addon Bulk Uploader plugin to the latest available version at least 1.2.5...
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Unauthenticated option changes vulnerability that could allow an attacker to redirect all pages and posts of the blog to a malicious website, as well as an authenticated options export/deletion vulnerability...
Omron G9SB-301-D Safety Controller Detection
Binary data 756254.prm...
Omron G9SB-301-B Safety Controller Detection
Binary data 756252.prm...
Open Redirection
ecstatic is vulnerable to open redirection. A lack of validation in the URL redirect allows an attacker to craft malicious requests that redirect users to a malicious site in an HTTP 301 redirect...
Open Redirect
Overview Versions of ecstatic prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an HTTP 301 redirect to any other domains. Recommendation If using ecstatic 4.x, upgrade to 4.1.2 or later. If...
Fedora 28 : 2:qemu (2018-44f8a7454d) (Spectre)
New CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl RPMs...
CVE-2018-17312
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
Cross site scripting
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
CVE-2018-17312
CVE-2018-17312 affects the Ricoh Aficio MP 301 printer. The vulnerability is HTML Injection and Stored XSS in the address-adding function, triggered via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. Public references corroborate Cross-Site Scripting in that area, with ...
RICOH Aficio MP 301 Printer Cross Site Scripting
Exploit Title: RICOH Aficio MP 301 Printer - HTML Injection and Stored XSS Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...
RICOH Aficio MP 301 Printer - Cross-Site Scripting
RICOH Aficio MP 301 Printer - Cross-Site Scripting Exploit Title: RICOH Aficio MP 301 Printer - Cross-Site Scripting Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link:...
RICOH Aficio MP 301 Printer - Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: RICOH Aficio MP 301 Printer - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link:...
GHSA-72FG-JQHX-C68P Open Redirect in st
st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...
Open Redirect in st
st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 redirect to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a...