WordPress Nexos theme SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. WordPress Nexos theme has a SQL injection vulnerability. The...

WordPress Nexos theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress Nexos...

Nexos - Real Estate < 1.8 - Unauthenticated Reflected XSS & SQL Injection

Unauthenticated Reflected XSS and SQL Injection vulnerabilities were discovered in the «Nexos - Real Estate WordPress Theme», tested version — v1.7. June 17th, 2020 - Confirmed & Escalated to Envato. June 19th, 2020 - v1.8 released. Fixing the issues. PoC PoC Unauthenticated Reflected XSS:...

Nexos - Real Estate < 1.8 - Unauthenticated Reflected XSS & SQL Injection

Unauthenticated Reflected XSS and SQL Injection vulnerabilities were discovered in the «Nexos - Real Estate WordPress Theme», tested version — v1.7. June 17th, 2020 - Confirmed & Escalated to Envato. June 19th, 2020 - v1.8 released. Fixing the issues. PoC Unauthenticated Reflected XSS:...

File Upload Vulnerability in ejucms of Hainan E&Y Technology Co. Ltd (CNVD-2020-44337)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. Ltd. ejucms file upload vulnerability, attackers can exploit the vulnerability to upload malicious files to obtain server privileges...

File Upload Vulnerability in Aiwo Real Estate System

Love nest real estate system is based on the second development of the intimate cat v4.7, specifically for the real estate industry customized set of systems. There is a file upload vulnerability in AiWo Real Estate System, which can be exploited by attackers to gain control of the web server...

estate-up.gov.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1168155 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Beijing Chain Home Real Estate Brokerage Co. Chain Home app suffers from denial-of-service vulnerability

Chain Home App is an official client of Chain Home, a large-scale real estate leasing and trading website. Chain Home App provides services of second-hand houses, new houses, rental houses, real estate finance and wealth management, real estate appraisal and other business types. There is a...

XSS vulnerability in ejucms (CNVD-2020-30146)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms exists XSS vulnerability, attackers can exploit the vulnerability to obtain user cookie information...

SQL Injection Vulnerability in ejucms Backend

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms background SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

russrealestate.com.au Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155103 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting russrealestate.com.au...

Microsoft Sway Abused in Office 365 Phishing Attack

A highly targeted phishing campaign, with a Microsoft file platform twist, has successfully siphoned the Office 365 credentials of more than 150 executives since mid-2019. Researchers attribute the campaign’s success to two parts: First, it leverages multiple Microsoft file-sharing services to...

Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies

In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore. Dubbed 'PerSwaysion,' the newly spotted cyberattack campaign leveraged...

Code execution vulnerability in ejucms backend

EJU real estate system ejucms is a set of localized O2O real estate website platform system. Code execution vulnerabilities exist in the background of ejucms, attackers can exploit the vulnerability to execute malicious code to obtain server privileges...

Huainan Yintai Software Technology Co., Ltd. billing master there are SQL injection vulnerabilities

Billing Master is open source customizable real estate agent ERP management system. Huainan Yintai Software Technology Co., Ltd Billing Master suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

real-estate-australia.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-1123412 Security Researcher pudsec Helped patch 7 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting real-estate-australia.com.au website and its users. Following coordinated and responsible vulnerability disclosure guidelin...

Arbitrary File Deletion Vulnerability in ejucms

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files, including system files...

EjuCMS suffers from SQL injection vulnerability (CNVD-2020-21980)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EjuCMS has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

File Upload Vulnerability in EjuCMS

EjuCMS is a localized O2O real estate website platform system. EjuCMS has a file upload vulnerability that can be exploited by attackers to gain access to the server...

E-House CMS of Hainan E&Y Technology Co., Ltd. suffers from a logic flaw vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform. Hainan EJU Technology Co., Ltd. ejucms CMS logic flaws exist in the vulnerability, attackers can use the vulnerability to create any directory...