CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

Cross site scripting

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

CVE-2019-16520

The All-in-One SEO Pack WordPress plugin (before version 3.2.7) is vulnerable to Stored XSS due to improper encoding of the SEO-specific description for posts via unsafe placeholder replacement. Affected: WordPress plugin All in One SEO Pack

PT-2019-14682

Name of the Vulnerable Software and Affected Versions All in One SEO Pack versions prior to 3.2.7 Description The issue arises from improper encoding of SEO-specific descriptions for posts, leading to Stored XSS susceptibility. This occurs due to unsafe placeholder replacement in the descriptions...

CVE-2019-16520: Improper Neutralization of Input During Web Page Generation

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

PT-2019-3706

Name of the Vulnerable Software and Affected Versions Java SE versions 7u231, 8u221, 11.0.4, and 13 Java SE Embedded version 8u221 Description The issue allows an unauthenticated attacker with network access via Kerberos to compromise Java SE and Java SE Embedded, potentially resulting in...

UBUNTU-CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "su...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +8502 more potentially affected by CVE-2019-16869 via io.netty:netty-all (>=4.0.0.beta1, <=4.1.41.final)

io.netty:netty-all MAVEN version =4.0.0.beta1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =local, =local, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.2.0 and more Source cves: CVE-2019-16869 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +8502 more potentially affected by CVE-2019-16869 via io.netty:netty-all (>=4.0.0.beta1, <=4.1.41.final)

io.netty:netty-all MAVEN version =4.0.0.beta1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =local, =local, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.2.0 and more Source cves: CVE-2019-16869 Source advisory:...

CVE-2019-17072

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

CVE-2019-17072

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

PT-2019-14938

Name of the Vulnerable Software and Affected Versions new-contact-form-widget plugin version 1.0.9 Description The issue is related to SQL Injection, which occurs via the all-query-page.php file. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue...

CVE-2019-17072: Improper Neutralization of Special Elements used in an SQL Command

The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...

all-today.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-today.ru website and its users. Following coordinated...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +8502 more potentially affected by CVE-2019-16869 via io.netty:netty-all (>=4.0.0.beta1, <=4.1.41.final)

io.netty:netty-all MAVEN version =4.0.0.beta1, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =local, =local, =0.42.1, =1.3.0, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.2.0 and more Source cves: CVE-2019-16869 Source advisory:...

all-in-one-seo-pack 3.2.7 Cross Site Scripting

Exploit Title: all-in-one-seo-pack 3.2.7 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\all-in-one-seo-pack" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://semperplugins.com/all-in-one-seo-pack-pro-version Software Link:...

Flare-Emu - Powered by IDA Pro and the Unicorn emulation framework that provides scriptable emulation features for the x86, x86_64, ARM, and ARM64 architectures to reverse engineers

flare-emu marries IDA Pro’s binary analysis capabilities with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible and robust emulator for its supported...

File Upload Vulnerability in Luthor's All Media Platform

Luthor's all-media platform is a comprehensive realization of the integration of media collection, editing, distribution and storage, and provides media users with an efficient work platform that can replace the current collection and editing system, solve the media process, and provide more...