WordPress read-and-understood plugin <= 2.1 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities found by d4wner in WordPress read-and-understood plugin versions =2.1. Solution Note from WordPress.org plugin repository: This plugin was closed on January 12, 2018, and is no longer available for download. Deactivate and delete...

WordPress Content Timeline plugin <=4.4.2 - Multiple Blind SQL Injection vulnerabilities

Multiple Blind SQL Injection vulnerabilities found by Jeroen ITNerdbox in premium WordPress plugin - Content Timeline =4.4.2 . It is possible to execute arbitrary SQL commands via the id parameter contenttimelineclass.php, contenttimelineedit.php, contenttimelineindex.php. Solution We were unable...

WordPress SQL Shortcode plugin <=1.1 - Authenticated SQL Execution vulnerability

Authenticated SQL Execution vulnerability found by Paul Dannewitz in WordPress SQL Shortcode plugin version 1.1 and earlier versions. This vulnerability allows users with low privileges to execute SQL. Solution SQL Shortcode plugin removed from WordPress plugin repository. Use plugin with caution...

Zomato: [www.zomato.com] IDOR - Delete/Deactivate any special menu of any Restaurants from Zomato

@prateek0490 was able to delete and deactivate special menu of any restaurant using IDOR Going through the JS, I found another cool function which looked interesting and vulnerable and indeed it was vulnerable - var...

Zomato: [www.zomato.com] IDOR - Delete/Deactivate ANY/ALL Promos through a Post Request at **clients/promoDataHandler.php**

@prateek0490 found a IDOR issue which can deactivate any special offer in our platform...

WordPress Plugin Event List 0.7.8 - SQL Injection

WordPress Plugin Event List 0.7.8 - SQL Injection Exploit Title: WordPress Plugin Event List = 0.7.8 - SQL Injection Date: 04-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://wordpress.org/plugins/event-list/ Version: 0.7.8 CVE : CVE-2017-9429 Category: webapp...

WordPress Event List plugin <=0.7.8 - SQL Injection vulnerability

WordPress Event List plugin =0.7.8 vulnerable to SQL injection. Vulnerability allows an authenticated user to execute arbitrary SQL commands via the "id" parameter to "wp-admin/admin.php" Solution WordPress Event List plugin removed from WordPress.org plugin repository, please deactivate the plug...

WordPress Wow Viral Signups plugin 2.1 - SQL Injection vulnerability

Wow Viral Signups WordPress plugin version 2.1 is vulnerable to SQL injection. An attacker could exploit POST parameter 'idsignup' to access the database. Solution We can't find information about fixed version of this plugin. It's not available anymore on WordPress plugin directory. Deactivate...

WordPress Firewall 2 plugin 1.3 - Cross-Site Request Forgery & Cross-Site Scripting vulnerability

WordPress Firewall 2 plugin version 1.3 is prone to Cross-Site Request Forgery & Cross-Site Scripting attacks. Solution We were unable to find patched version of this WordPress plugin, and it's not available anymore on WordPress.org plugin directory. Please deactivate the plugin and contact the...

Design/Logic Flaw

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to 1 initiate a false alarm or 2 deactivate an alarm by modifying the client-server data stream...

CVE-2015-8254

The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to 1 initiate a false alarm or 2 deactivate an alarm by modifying the client-server data stream...

Kaspersky Internet Security 15.0.2.361 Authentication Bypass Vulnerability

By analyzing the password-based authentication for unloading the Kaspersky Internet Security protection, the SySS GmbH found out, that the password comparison is done within the process avp.exe actually within the used module shellservice.dll, which runs or can be run in the context of the curren...

Kaspersky Anti-Virus 15.0.1.415 Authentication Bypass Vulnerability

By analyzing the password-based authentication for unloading the Kaspersky Anti-Virus protection, the SySS GmbH found out, that the password comparison is done within the process avp.exe actually within the used module shellservice.dll, which runs or can be run in the context of the current Windo...

CVE-2015-1559

Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...

WordPress Pods 2.4.3 CSRF / Cross Site Scripting

Vulnerability title: Wordpress plugin Pods alert'xss' target="http://localhost"; for i=0; i'; CSRF 2 delete pods plugin data: CSRF 3 deactivate pods and delete data: CSRF 4 enable "roles and capab...

WordPress Pods Plugin <= 2.4 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks via the "toggled" parameter in the pods-components page to wp-admin/admin.php, reset pod settings and data via the "podsreset" parameter in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 activate or 2 deactivate the plugin via the active parameter to wp-admin/edit-comments.php, 3...

Google, Microsoft to Implement Mobile 'Kill Switch'

Google and Microsoft will incorporate remote kill switch features into the default builds of their respective mobile operating systems for the first time. Oddly enough, the announcement comes in a joint press release issued by New York Attorney General, Eric Schneiderman, and San Francisco Distri...

CVE-2013-2699

Cross-site request forgery CSRF vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors...