4648 matches found
CVE-2018-19207
The CVE-2018-19207 entry concerns the WordPress WP GDPR Compliance plugin (before 1.4.3). The vulnerability stems from improper handling of input to WordPress database operations (notably $wpdb->prepare()), enabling remote attackers to execute arbitrary code. Multiple sources (NVD, Nuclei temp...
WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option
The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...
WP GDPR Compliance <= 1.4.2 - Unauthenticated Call Any Action or Update Any Option
The plugin WP GDPR Compliance allows unauthenticated users to execute any action and to update any database value. If the request data form is available for unauthenticated users, even unauthenticated users are able to do this. See references for discussion of the issue. The problem is in the fil...
WordPress WP GDPR Compliance Plugin Privilege Escalation
The Wordpress GDPR Compliance plugin use auxiliary/admin/http/wp/gdprcomplianceprivesc msf undefinedgdprcomplianceprivesc show actions ...actions... msf undefinedgdprcomplianceprivesc set ACTION msf undefinedgdprcomplianceprivesc show options ...show and set options... msf...
privacy.vakmedianet.nl Open Redirect vulnerability
Open Bug Bounty ID: OBB-693439 Description| Value ---|--- Affected Website:| privacy.vakmedianet.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden unt...
[SECURITY] Fedora 27 Update: firefox-63.0-2.fc27
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
ThreatList: Dead Web Apps Haunt 70 Percent of FT 500 Firms
A study of abandoned websites owned by leading global corporations hammers home the point that old web applications need to be properly mitigated or retired. Otherwise, these resources often haunt a firm long after they have been forgotten. Researchers at High-Tech Bridge used the Financial Times...
Lynis 2.7.0 - Security Auditing Tool for Unix/Linux Systems
We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...
ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach
About a fifth of Americans would ditch a business in the wake of a major data breach, new research has found. In a survey of 2,000 adult consumers across the United States by PCI Pal, almost half 44 percent of them have personally suffered the negative consequences of a security breach or hack. S...
[SECURITY] Fedora 28 Update: firefox-63.0-2.fc28
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
ammari.de XSS vulnerability
Open Bug Bounty ID: OBB-690302 Description| Value ---|--- Affected Website:| ammari.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
WordPress GDPR Compliance Plugin Privilege Escalation (CVE-2018-19207)
A privilege escalation vulnerability exists in WordPress GDPR Compliance Plugin. The vulnerability is due to a missing authorization at the "userscanregister" action. A remote authenticated attacker may exploit this vulnerability to gain administrator privileges...
Small businesses to receive NIST assistance: Overlooked areas of the NIST framework
In years past, it was a challenge for organizations across every industry to ensure they were protected against the risks of - and ready to respond to - a cybersecurity incident. Decision-makers and IT administrators alike followed the advice of experts and worked to create strong safeguards and...
Automating Incident Prevention and Response in AWS
Information security incidents can result in reputational damage, financial losses, or a loss of system functionality for organizations at any time. Because threats and attack vectors are growing rapidly, organizations must prepare to respond to incidents in real time. The incident response IR...
Partner Perspectives: SOAR with Demisto and Carbon Black
Abhishek Iyer is the Technical Marketing Manager for Demisto. Automate your Endpoint Protection and Incident Response Demisto’s security orchestration and automation platform enables organizations to standardize, automate and coordinate response processes across their security stack. Playbooks...
Qualys Broadens Security Offerings for Azure
Qualys is expanding its security and compliance capabilities for Microsoft Azure, by adding protection for the on-premises Azure Stack and extending capabilities for public cloud deployments. By using Qualys’ platform to defend hybrid IT environments, organizations get a unified view of their...
[SECURITY] Fedora 29 Update: firefox-62.0.3-1.fc29
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Design/Logic Flaw
A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between use...
CVE-2018-0436 Cisco Webex Teams Information Disclosure and Modification Vulnerability
A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between use...
