2251 matches found
WordPress Opal Estate plugin <= 1.6.11 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Opal Estate plugin versions = 1.6.11. Solution This plugin has been closed as of June 15, 2021 and is not available for download. Reason: Security Issue...
WordPress WP Pro Real Estate 7 Plugin Cross-Site Scripting Vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress WP P...
Preparing for your migration from on-premises SIEM to Azure Sentinel
The pandemic of 2020 has reshaped how we engage in work, education, healthcare, and more, accelerating the widespread adoption of cloud and remote-access solutions. In today’s workplace, the security perimeter extends to the home, airports, the gym—wherever you are. To keep pace, organizations...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress WP P...
First American Financial Pays Farcical $500K Fine
In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. NYSE:FAF was leaking more than 800 million documents -- many containing sensitive financial data -- related to real estate transactions dating back 16 years. This week, the U.S...
Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)
The theme did not properly sanitise the ctcommunity parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context...
Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)
The theme did not properly sanitise the ctcommunity parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context PoC...
WordPress Real Estate 7 premium theme <= 3.1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze Patchstack Red Team in WordPress Real Estate 7 premium theme versions = 3.1.0. Vulnerable parameter: "&ctcommunity=". Solution Update the WordPress Real Estate 7 premium theme to the latest available version at...
Mingyuan Cloud Data Center has a logic flaw vulnerability
Shenzhen Mingyuan Cloud Technology Co., Ltd. is a digital service provider of real estate ecological chain. A logic flaw vulnerability exists in the Mingyuan Cloud Data Center. Attackers use the vulnerability to access the backend interface and obtain sensitive information by intercepting data...
Targeted Phishing Attacks Strike High-Ranking Company Executives
An evolving phishing campaign observed at least since May 2020 has been found to target high-ranking company executives across manufacturing, real estate, finance, government, and technological sectors with the goal of obtaining sensitive information. The campaign hinges on a social engineering...
File upload vulnerability in Billing Master Aj***.cl***.php file
Billing Master is a real estate agent ERP management system. A file upload vulnerability exists in the Billing Master Aj.cl.php file. An attacker can exploit this vulnerability to gain server privileges...
SQL Injection Vulnerability in the re***.php file of Anjoye Real Estate System
Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the re.php file of Anleye real estate system. An attacker can exploit the vulnerability to obtain sensitive information from the...
SQL Injection Vulnerability in the ne***.php file of Anjoye Real Estate System
Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the ne.php file of Anleye Real Estate System. An attacker can exploit the vulnerability to obtain sensitive information from the...
SQL Injection Vulnerability in the sa***.php file of Anjoye Real Estate System
Anleye is a domestic real estate website construction brand, the program is made of highly efficient PHP5+MYSQL architecture. A SQL injection vulnerability exists in the sa.php file of Anleye real estate system. An attacker can exploit the vulnerability to obtain sensitive information from the...
nylonrealestate.com Cross Site Scripting vulnerability OBB-1494576
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
myprivaterealestate.com.au Cross Site Scripting vulnerability OBB-1454593
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hamiltonislandrealestate.com.au Cross Site Scripting vulnerability OBB-1446284
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
croatian.estate Cross Site Scripting vulnerability OBB-1445196
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
saronikosrealestate.gr Cross Site Scripting vulnerability OBB-1444597
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hy.realestate.immobilien Cross Site Scripting vulnerability OBB-1442584
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...