Lucene search
+L

859 matches found

exploitpack
exploitpack
added 2019/10/17 12:0 a.m.27 views

Web Companion versions 5.1.1035.1047 - WCAssistantService Unquoted Service Path

Web Companion versions 5.1.1035.1047 - WCAssistantService Unquoted Service Path Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.co...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/10/17 12:0 a.m.246 views

Web Companion 5.1.1035.1047 WCAssistantService Unquoted Service Path

Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.com Version: Web Companion versions 5.1.1035.1047 CVE : N/A Tested on: Windows 7...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/10/17 12:0 a.m.258 views

Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path

Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path Exploit Author: Debashis Pal Date: 2019-10-17 Vendor Homepage : https://webcompanion.com Source: https://webcompanion.com Version: Web Companion versions 5.1.1035.1047 CVE : N/A Tested on: Windows 7...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/09/02 12:0 a.m.14 views

WordPress Companion Auto Update Plugin < 3.2.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113486";...

8.8CVSS9.1AI score0.00649EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.2 views

WordPress companion-auto-update plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-auto-update is a plugin used to update WordPress and related components. WordPress companion-auto-update plugin input...

9.8CVSS6.7AI score0.01955EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.7 views

WordPress companion-sitemap-generator plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-sitemap-generator is a sitemap plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

8.8CVSS6.7AI score0.00674EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/20 12:0 a.m.3 views

WordPress companion-auto-update plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-auto-update is a plugin used to update WordPress and related components. A cross-site request forgery vulnerability exists i...

8.8CVSS6.8AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/16 9:15 p.m.4 views

CVE-2019-15113

The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF...

8.8CVSS7.3AI score0.00674EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/16 9:15 p.m.3 views

CVE-2018-20972

The companion-auto-update plugin before 3.2.1 for WordPress has CSRF...

8.8CVSS5.8AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/16 9:15 p.m.5 views

CVE-2018-20973

The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion...

9.8CVSS5.8AI score0.01955EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/16 9:15 p.m.9 views

CVE-2018-20972

The companion-auto-update plugin before 3.2.1 for WordPress has CSRF...

8.8CVSS8.8AI score0.00649EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/16 9:15 p.m.13 views

CVE-2018-20973

The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion...

9.8CVSS9.4AI score0.01955EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/16 9:15 p.m.15 views

Cross site request forgery (csrf)

The companion-auto-update plugin before 3.2.1 for WordPress has CSRF...

6.8CVSS8.7AI score0.00649EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/16 8:21 p.m.376 views

CVE-2018-20972

CVE-2018-20972 is a CSRF vulnerability in the WordPress plugin companion-auto-update prior to version 3.2.1. The connected sources consistently describe an insufficient verification of request origin that allows cross-site requests to perform unintended actions on behalf of an authenticated user....

8.8CVSS9.1AI score0.00649EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/16 8:21 p.m.354 views

CVE-2018-20973

CVE-2018-20973 concerns the WordPress plugin companion-auto-update before version 3.2.1, which contains a local file inclusion (LFI) vulnerability. The issue arises in the plugin, enabling an attacker to access local files on the server. Public references in the provided documents consistently de...

9.8CVSS9.2AI score0.01955EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/16 8:20 p.m.381 views

CVE-2019-15113

CVE-2019-15113 affects the WordPress plugin companion-sitemap-generator (before 3.7.0). Multiple sources confirm a CSRF vulnerability in this plugin, enabling unauthorized actions from forged requests. The NVD entry lists CVSS v3 base score 8.8 (HIGH) with network attack vector, low attack comple...

8.8CVSS8.7AI score0.00674EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/16 8:20 p.m.16 views

CVE-2019-15113

The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF...

8.8AI score0.00674EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/27 12:0 a.m.3 views

Arbitrary Password Reset Vulnerability in Companion Life App

The Companion Life App is an app for opening neighborhood gates. An arbitrary password reset vulnerability exists in Companion Life APP, which can be exploited by an attacker to reset any password...

7.1AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2019/01/14 12:0 a.m.16 views

Companion Sitemap Generator <= 3.6.6 - CSRF

The Companion Sitemap Generator – HTML & XML WordPress plugin was affected by a CSRF security vulnerability...

6.8CVSS1.4AI score0.00674EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2019/01/14 12:0 a.m.12 views

Companion Auto Update <= 3.3.5 - Authenticated SQL Injection

The Companion Auto Update WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

3.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder