546 matches found
ban-tawai.com XSS vulnerability
Vulnerable URL: http://www.ban-tawai.com/shop.php?cid=%22%22;%3C/script%3E%3Cscript%3Eprompt%28/XSSPOSED/%29%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11593...
UK to ban WhatsApp, iMessage and Snapchat Under New Laws
If you rely on messaging apps to remain in contact with your family members and friends, then you may have to switch back to old-fashioned text messaging service in matter of weeks due to a new law currently going through Parliament. WhatsApp and Facebook Messenger to Ban in UK The popular...
Google Glass 2.0 Coming Soon, says Italian Luxottica Eyewear Company
The details of the next version of Google Glass has been revealed - the search engine giant is planning to launch Google Glass 2.0 soon. Massimo Vian, the chief executive officer of Italian eyewear company Luxottica, said his company is working with Google engineers on not just one, but two new...
Whatsapp Banned Users For Using WhatsApp PLUS App
Are you one of those victims whose WhatsApp app has recently been banned?? Then you must have installed a 3rd-party version of WhatsApp client, like WhatsAppMD or Whatsapp PLUS in your mobile phone for sure. Reportedly after 12 AM IST on 21st January 2015, WhatsApp, the widely popular messaging...
WordPress Plugin IP Ban Has Multiple Cross-Site Request Forgery Vulnerabilities
WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL. IP Ban plugin is a plugin used to prohibit certain IP addresses from accessing the blog, similar to the role of the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...
CVE-2014-9438
Cross-site request forgery CSRF vulnerability in the Moderator Control Panel in vBulletin 4.2.2 allows remote attackers to hijack the authentication of administrators for requests that 1 ban a user via the username parameter in a dobanuser action to modcp/banning.php or 2 unban a user, 3 modify...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...
CVE-2014-9413
The CVE-2014-9413 entry concerns the WordPress IP Ban plugin (simple-ip-ban) up to version 1.2.3, which has multiple CSRF vulnerabilities that let an attacker hijack an administrator’s session for requests that perform XSS via the ip_list, user_agent_list, or redirect_url parameters on the simple...
CVE-2014-9413
Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...
CVE-2014-9413: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...
WordPress IP Ban Plugin <= 1.2.3 - Multiple CSRF and XSS
Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution Update the plugin...
vBulletin Moderator Control Panel 4.2.2 CSRF
Exploit Title: vBulletin Moderator Control Panel CSRF Google Dork: "Powered by vBulletin® Version 4.2.2" Date: 16-12-2014 Exploit Author: Tomescu Daniel http://daniel-tomescu.com https://rstforums.com/forum Vendor Homepage: http://www.vbulletin.com/en/vb4-features/ Software Link: Premium Version:...
WordPress IP Ban 1.2.3 CSRF / XSS
Title: WordPress 'IP Ban' plugin - CSRF/XSS Version: 1.2.3 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/simple-ip-ban/ Notified WordPress: 2014/11/27 ---------------------------------------------------------------- Description:...
Simple Ip Ban <= 1.2.3 - Multiple CSRF
The IP Ban WordPress plugin was affected by a Multiple CSRF security vulnerability...
CVE-2014-6230
WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...
CVE-2014-6230: Improper Input Validation
WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...
CVE-2014-6230
CVE-2014-6230 affects the WordPress WP-Ban plugin, prior to version 1.6.4. The vulnerability arises because the plugin takes the IP address from the X-Forwarded-For header when configured in certain environments, bypassing the plugin’s IP blacklist. This allows remote attackers to bypass bans if ...
PT-2014-7103 · WordPress · Wp-Ban
Name of the Vulnerable Software and Affected Versions: WP-Ban plugin versions prior to 1.6.4 Description: The issue allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header when running in certain configurations. Recommendations: For WP-Ban plugin versions prior to...