1070 matches found
CVE-2017-8875
The CVE-2017-8875 entry concerns the Clean Login plugin for WordPress prior to version 1.8. An explicit CSRF vulnerability allows remote attackers to modify the login/logout redirect URLs. The issue targets the plugin’s CSRF protection around the redirect URL settings (as evidenced by PoC in WPEX...
WordPress Clean Login Plugin CSRF Vulnerability
WordPress "Clean Login" is a front-end login and registration plugin. WordPress Clean Login plugin suffers from a CSRF vulnerability, which can be exploited by remote attackers to change wordpress login redirect url to other malicious addresses...
WordPress Clean Login Cross Site Request Forgery
=============== Software Description =============== Software:clean login version: a a a a a a a a a ========= Mitigations ================ Disable the plugin until a new version is released that fixes this bug. ========= Fixed ========= https://wordpress.org/plugins/clean-login/developers1.8...
WordPress Clean Login Cross Site Request Forgery Vulnerability
WordPress Clean Login plugin versions prior to 1.8 suffer from a cross site request forgery vulnerability. =============== Software Description =============== Software:clean login version: a a a a a a a a a ========= Mitigations ================ Disable the plugin until a new version is released...
Clean Login <= 1.7.12 - Change Redirect URL CSRF
The Clean Login WordPress plugin was affected by a Change Redirect URL CSRF security vulnerability. PoC...
Trend Micro Threat Discovery Appliance 2.6.1062r1 dlp_policy_upload.cgi Remote Code Execution
!/usr/local/bin/python """ Trend Micro Threat Discovery Appliance /opt/TrendMicro/MinorityReport/bin/ Then, all we do is create /engptnstores/prod/sensorSDK/data/si/dlpkill.sh with malicious code and get it executed... Notes: ====== - For this particular PoC, all I did was exec a bind shell using...
clean-cracks.com XSS vulnerability
Vulnerable URL: http://www.clean-cracks.com/search.php?results=10"=and=1=advanced office password recovery Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Malware exploit: Citadel
Type: Remote Code Execution Author: Xylitol import urllib import urllib2 Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability Work only on windows box def requesturl, params=None, method='GET': if method == 'POST': urllib2.urlopenurl, urllib.urlencodeparams.read elif method ==...
Receiver for Windows - Unable to remove old version
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Question: Unable to install new receiver since we were getting the pop-up that later version already...
How to reboot or shutdown NetScaler MAS using CLI
Citrix ADM, formerly NetScaler MAS There is an option on MAS GUI to reboot it but what is the equivalent CLI command for it. Do not use the REBOOT command as it is not a clean reboot and will need a Database recovery...
[SECURITY] Fedora 25 Update: python-django-1.9.11-1.fc25
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
PHP 'zend_symtable_clean()' function out-of-bounds read denial of service vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. PHP...
mod_nss security, bug fix, and enhancement update
1.0.14-7 - Add the permission patch to the repository 1312583 1.0.14-6 - Check the NSS certificate database directory for read permissions by the Apache user. 1312583 1.0.14-5 - Update clean semaphore patch to not free the pinList twice. 1364560 1.0.14-4 - Update clean semaphore patch to not clos...
Clean Master 1.0 - Unquoted Service Path Privilege Escalation Vulnerability
Clean Master Cleaner is a powerful application dedicated to the cleaning of certain content Android terminal. It is able to remove all traces of activities performed on the Smartphone to free up space and increase performance. This app is able to best improve the security system of the device. Co...
Week Three of National Cyber Security Awareness Month
In partnership with DHS, the National Cyber Security Alliance has released information on recognizing cyber crime and how to protect yourself online. Recommendations include deleting suspicious communications, being wary of "too good to be true" offers, and using strong authentication. The...
Automated Memory Analyzer For Malware Samples: VolatilityBot
Automated Memory Analyzer For Malware Samples VolatilityBot is an automation tool for researchers cuts all the guesswork and manual tasks out of the binary extraction phase, or to help the investigator in the first steps of performing a memory analysis investigation. Not only does it automaticall...
Clean Master v1.0 - Unquoted Path Privilege Escalation
Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 19...
Clean Master 1.0 Privilege Escalation
Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 19...
Clean Master v1.0 - Unquoted Path Privilege Escalation
Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 19...
