CVE-2019-19943

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...

CVE-2019-19943

CVE-2019-19943 affects Pablo Quick n Easy Web Server (quickweb.exe) v3.3.8. The HTTP service is vulnerable to remote unauthenticated heap memory corruption when handling a large host or domain parameter, with a double free cited as the underlying cause. This can lead to remote code execution per...

PT-2020-10301

Name of the Vulnerable Software and Affected Versions Pablo Quick 'n Easy Web Server version 3.3.8 Description The issue concerns a Remote Unauthenticated Heap Memory Corruption in the HTTP service of the affected software. This corruption can occur via a large host or domain parameter. It is...

CVE-2019-19943: Double Free

The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free...

WordPress Easy Forms for Mailchimp plugin <= 6.6.2 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability discovered in WordPress Easy Forms for Mailchimp plugin versions = 6.6.2. Solution Update the WordPress Easy Forms for Mailchimp plugin to the latest available version at least 6.6.3...

Quick N Easy Web Server 3.3.8 - Denial of Service Exploit

Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future import...

Quick N Easy Web Server 3.3.8 Denial Of Service

Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html Version: $ python exploit.py 127.0.0.1 80 """ from future...

Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)

Quick N Easy Web Server 3.3.8 - Denial of Service PoC Title: Quick N Easy Web Server 3.3.8 - Denial of Service PoC Date: 2019-12-25 Author: Cody Winkler Vendor Homepage: https://www.pablosoftwaresolutions.com/ Software Link: https://www.pablosoftwaresolutions.com/html/quickneasywebserver.html...

shadowbroker

This repository, bahuwang/shadowbroker, contains a collection of exploits and tools leaked by the Shadow Brokers, a group known for releasing sensitive information. The repository includes a README file that lists the contents of the repository, which includes various exploit modules and tools...

CVE-2020-5530

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5530

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5530

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5530

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5530

The CVE-2020-5530 entry describes a cross-site request forgery (CSRF) in the WordPress plugin Easy Property Listings, affecting versions prior to 3.4. The vulnerability allows an attacker to hijack an administrator’s authenticated session via unspecified vectors, enabling unintended actions when ...

WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery

Overview WordPress Plugin "Easy Property Listings" provided by Merv Barrett contains a cross-site request forgery vulnerability CWE-352. Rei Nakahara of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported this vulnerability to the...

Easy Property Listings Cross-Site Request Forgery Vulnerability

Easy Property Listings is a property listings plugin. A cross-site request forgery vulnerability exists in versions prior to Easy Property Listings 3.4. The vulnerability stems from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could...

Easy Property Listings < 3.4 - Cross-Site Request Forgery (CSRF)

No details were provided...

PT-2020-18505

Name of the Vulnerable Software and Affected Versions Easy Property Listings versions prior to 3.4 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The attack vector is not specified. Recommendations For versions prior to 3.4,...

CVE-2020-5530: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...