Citrix StoreFront Server 7.15 - XML External Entity Injection

Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...

WordPress Easy Digital Downloads Lattice theme cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Lattice theme is an e-commerce website theme plugin used in it. A cross-site scripting...

WordPress Easy Digital Downloads Upload File extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Upload File extension is a file upload plugin used in it. A cross-site scripting vulnerability...

WordPress Easy Digital Downloads Stripe extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Stripe extension is a payment gateway plugin used in it. A cross-site scripting vulnerability exists in the...

WordPress Easy Digital Downloads Quota theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Quota theme is a Quota theme plugin used in it. A cross-site scripting vulnerability exists in th...

WordPress Easy Digital Downloads Free Downloads extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Free Downloads extension is a free download management plugin used in it. A cross-site scripting...

WordPress Easy Digital Downloads Shoppette theme cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Shoppette theme is an e-commerce website theme plugin used in it. A cross-site scripting...

WordPress Easy Digital Downloads Reviews extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Reviews extension is a FAQ plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress Easy Digital Downloads Wish Lists extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform using PHP language development. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Wish Lists extension is a product collection plugin used in it. A cross-site scripting...

WordPress Easy Digital Downloads Twenty-Twelve theme cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Twenty-Twelve theme is a website theme plugin used in it. A cross-site scripting vulnerabilit...

WordPress Easy Digital Downloads Digital Store theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Digital Store theme is used in which a digital product online sales theme website plugin. A...

WordPress Easy Digital Downloads Simple Shipping extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Easy Digital Downloads EDD Simple Shipping extension is a digital product sales plugin used in it. A cross-site...

WordPress Easy Digital Downloads Software Licensing extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Software Licensing extension is a software license download plugin used in it. A cross-site...

WordPress Easy Digital Downloads Recurring Payments extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Recurring Payments extension is a payment gateway plugin used in it. A cross-site scripting vulnerability...

WordPress Easy Digital Downloads htaccess Editor extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD htaccess Editor extension is an htaccess editor plugin used in it. A cross-site scripting...

ThreatList: Sharp Increase in Fake Mobile Apps Impersonating Legit Ones

Malicious mobile apps that try to dupe consumers by mimicking reputable apps is a persistent problem that’s on the rise, making an app store’s commitment to security a key factor to consider for mobile users who want to avoid these threats, according to a new report. The number of blacklisted app...

42 Adware Apps with 8 Million Downloads Traced Back to Vietnamese Student

First of all, if you have any of the below-listed apps installed on your Android device, you are advised to uninstall it immediately. Cybersecurity researchers have identified 42 apps on the Google Play Store with a total of more than 8 million downloads, which were initially distributed as...

CVE-2015-9523

The Easy Digital Downloads EDD Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9524

The Easy Digital Downloads EDD Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9521

The Easy Digital Downloads EDD Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...