91 matches found
ap.mypaper.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-960285 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ap.mypaper.kr website and its...
MariaDB: scripts loader (denial of service) vulnerability
1 vulnerability description WordPress allows users to load multiple JS files and CSS files through load-scripts.php files at once. For example, https://wpwebsite.com/wp-admin/load-scripts.php?c=1&load=jquery-ui-core,editor&ver=4.9.1, file load-scripts.php will load jquery-ui-core and editor files...
samoa-do-vip.randco.fr XSS vulnerability
Open Bug Bounty ID: OBB-683182 Description| Value ---|--- Affected Website:| samoa-do-vip.randco.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress < 4.9.5 Multiple Vulnerabilities
According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.9.5. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109034; scriptversion"1.12";...
LocalTapiola: DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation
Description There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details Detailed attack scenario is described for example here:...
Exploit for Uncontrolled Resource Consumption in Wordpress
Shiva First of all, put Shiva on watch. I will be upgrading i...
premium.wpmudev.org XSS vulnerability
Open Bug Bounty ID: OBB-569629 Description| Value ---|--- Affected Website:| premium.wpmudev.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Wordpress DoS Attack: CVE-2018-6389
Overview On February 5, an Israeli security researcher, Barak Tawily, discovered a Denial of Service DoS attack impacting all 3.x-4.x versions of the Wordpress content management platform. The vulnerability is currently unpatched and relies on a performance boosting feature in Wordpress allowing...
CVE-2018-6389
creationtimestamp| type| source ---|---|--- 2018-02-14 09:33:59+00:00| exploited| https://t.me/canyoupwnme/3262 2018-04-09 06:36:01+00:00| seen| https://t.me/codebysec/1344 2019-11-21 11:20:46+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3397 2020-01-08 15:00:20+00:00|...
CVE-2018-6389
In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service resource consumption by using the large list of registered .js files from wp-includes/script-loader.php to construct a series of requests to load every file many times...
CVE-2018-6389
In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service resource consumption by using the large list of registered .js files from wp-includes/script-loader.php to construct a series of requests to load every file many times...
CVE-2018-6389
CVE-2018-6389 affects WordPress up to version 4.9.2. An unauthenticated attacker can cause a denial of service by abusing wp-admin/load-scripts.php to load a large number of JavaScript files, consuming server resources. Connected reports describe the attack as constructing many requests for the r...
Exploit for Uncontrolled Resource Consumption in Wordpress
CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...
WordPress Core Denial Of Service
!/usr/bin/env python -- coding: utf-8 -- Developed using OWASP Nettacker - https://www.owasp.org/index.php/OWASPNettacker Exploit Author: OWASP Nettacker Description: WordPress Core - 'load-scripts.php' Denial of Service CVE-2018-6389 February 5, 2018 references...
WordPress Core Load Script Denial of Service (CVE-2018-6389)
A Denial of Service vulnerability exists within WordPress Core Load Script. This vulnerability is due to the way WordPress handles large array loads. Successful exploitation could lead to a denial of service...
Unpatched DoS Flaw Could Help Anyone Take Down WordPress Websites
A simple yet serious application-level denial of service DoS vulnerability has been discovered in WordPress CMS platform that could allow anyone to take down most WordPress websites even with a single machine—without hitting with a massive amount of bandwidth, as required in network-level DDoS...
WordPress 'load-scripts.php' DoS Vulnerability - Linux
WordPress is prone to a denial of service DoS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
metabolomicsworkbench.org XSS vulnerability
Open Bug Bounty ID: OBB-533690 Description| Value ---|--- Affected Website:| metabolomicsworkbench.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
