Automattic: information disclosure

Use Google chrome 35.0.1916.114m for reproduction 1. go to https://app.simplenote.com/ 2. login into the app. 3. Now press logout, and press back button on browser. You will see the session back.This is the information disclosure vulnerability. I recommend checking for a valid, authenticated...

Automattic: xss in simperium.com

Hello Automattic, I found xss here simperium.com XSS Payload: '" Vulnerable Link: https://simperium.com/help/questions/ Proof of Concept: http://i.imgur.com/E4CM58A.png Thanks, Jerold Camacho...

Automattic: logout csrf app.simplenote.com/logout

Proof of Concept:...

Automattic: xss in app.simplenote.com

Hello Automattic, I found xss here app.simplenote.com XSS Payload: CLICK ME TO PROMPT Proof of Concept: http://i.imgur.com/8Ai0deF.png Thanks, Jerold Camacho...

Automattic: HTML form without CSRF protection

HTML form without CSRF protection Vulnerability description Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts...

Automattic: Session Cookie without Secure flag set

vulnerability-Session Cookie without Secure flag set Vulnerability description This cookie does not have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels. This is an important security protection...

Automattic: Session Cookie without Secure flag set

vulnerability-Session Cookie without Secure flag set --------------------------------------- Vulnerability description This cookie does not have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels...

Automattic: Simplenote Silverlight cross-domain policy misconfiguration

The Simplenote application publishes a Silverlight cross-domain policy which allows access from any domain. Allowing access from all domains means that any domain can perform two-way interaction with this application. This policy is likely to present a significant security risk. If a user is logg...

WordPress Pingback Vulnerability Could Lead to DDoS Attacks

A pingback vulnerability exists in the WordPress blogging platform that could leak information and lead to distributed denial of service DDoS attacks if the right script is run, according to web application security firm Acunetix. A pingback is technically something blog owners rely on to track w...

WordPress Hacked, Source Code Stolen

Servers belonging to Automattic, which makes the popular WordPress blogging software, say that their servers were hacked and that the company’s source code is believed to have been “exposed and copied,” according to a company blog post Wednesday. The post, by Matt Mullenweg, Automattic’s...

WordPress Automattic Stats Plugin <= 1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the HTTP Referer field. Solution Update the plugin...