natwest.com XSS vulnerability

Vulnerable URL: https://www.natwest.com/apps/secure/applicationformsdda/asp/offset/formNWBoffset.asp?segment=personal=367.21=123=lol= Details: Description| Value ---|--- Patched:| Yes, at 17.02.2016 Latest check for patch:| 17.02.2016 01:27 GMT Vulnerability type:| XSS Vulnerability status:|...

Threat Outbreak Alert RuleID19028: Email Messages Distributing Malicious Software on October 28, 2015

Medium Alert ID: 41773 First Published: 2015 October 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19028 may contain the following files: Name |...

WordPress Candidate Application Form Plugin 1.0 - Arbitrary File Download

Candidate Application Form plugin is prone to an arbitrary file download vulnerability via "downloadpdffile.php". It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download

WordPress Plugin Candidate Application Form 1.0 - Arbitrary File Download Title: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/candidate-application-form...

WordPress Candidate Application Form 1.0 File Download

Title: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-12 Download Site: https://wordpress.org/plugins/candidate-application-form Vendor: https://profiles.wordpress.org/flaxlandsconsulting/ Vendor Notified:...

Candidate Application Form <= 1.3 - Unauthenticated Arbitrary File Download

Plugin is still affected and has been closed. The code in downloadpdffile.php does not do any sanity checks, allowing a remote attacker to download sensitive system files. PoC $ curl...