CVE-2018-13832

Multiple Persistent cross-site scripting XSS issues in the Techotronic all-in-one-favicon aka All In One Favicon plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text...

CVE-2018-13832

Multiple Persistent cross-site scripting XSS issues in the Techotronic all-in-one-favicon aka All In One Favicon plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via Apple-Text, GIF-Text, ICO-Text, PNG-Text, or JPG-Text...

WordPress All-in-One WP Migration Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress All-in-One WP Migration plugin. An attacker can exploit this...

SDN Security Evaluation Framework: DELTA

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...

WordPress All In One WP Security And Firewall Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site.All In One WP Security & Firewall is one of the security management and firewall plug-ins. A cross-site scripting...

ZKTeco ZKBioSecurity 3.0 Cross Site Scripting

i? ZKTeco ZKBioSecurity 3.0 Multiple XSS Vulnerabilities Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230 Personnel: 1.0.1.0R1916 Access: 6.0.1.0R1757 Elevator: 2.0.1.0R777...

ZKTeco ZKBioSecurity 3.0 - Directory Traversal

ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230 Personnel: 1.0.1.0R1916 Access: 6.0.1.0R1757 Elevator:...

WordPress All In One WP Security & Firewall Plugin <= 4.1.2 - Multiple Vulnerabilities

There are multiple vulnerabilities in in login CAPTCHA. Because of them, attackers can automate login attempts when the CAPTCHA is enabled. Solution Update the plugin...

WordPress All in One SEO Pack Plugin <= 2.3.6.1 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress All in One SEO Pack Plugin 2.3.6.1 - Persistent XSS

Because of this vulnerability, an attacker can steal administrators session token or perform other arbitrary actions. Solution Update the WordPress plugin to the newer stable and safe version...

WordPress All in One SEO Pack 2.3.6.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million activ...

WordPress All In One SEO Pack 2.3.6.1 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin ------------------------------------------------------------------------ David Vaartjes, July 2016...

All in One SEO Pack <= 2.3.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Requires 'Track Blocked Bots setting' to be enabled which it is not by default...

All-In-One Toolbox (Cleaner) - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application All-In-One Toolbox Cleaner published at the 'play' market has multiple vulnerabilities...

Uber: Stored XSS in drive.uber.com WordPress admin panel

There is another bug in the All In One Event Calendar plugin used on drive.uber.com. An attacker can inject arbitrary JavaScript in the administrative Dashboard of WordPress. The script would be evaluated under administrator privileges as only logged-in administrators can view the Dashboard. Such...

All In One WP Security And Firewall < 4.0.6 - XSS

The All In One WP Security & Firewall WordPress plugin was affected by a XSS security vulnerability...

WordPress All-in-One Migration Plugin Export

An unauthenticated download vulnerability has been reported in WordPress All-in-One Migration Plugin. Successful exploitation of this vulnerability would allow a remote attacker to receive the affected system's database...

WordPress All-in-One Migration Export

This module allows you to export Wordpress data such as the database, plugins, themes, uploaded files, etc via the All-in-One Migration plugin without authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation

This plugin is prone to an unspecified privilege escalation vulnerability. Solution Update the plugin...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...