8118 matches found
CVE-2020-13487
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...
Design/Logic Flaw
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...
CVE-2020-13487
The vulnerability is in the bbPress WordPress plugin up to version 2.6.4, where stored XSS exists in the Forum creation section. The issue allows JavaScript execution in the admin interface (wp-admin/edit.php?post_type=forum) and is exploitable by an administrator via the wp-admin/post.php?action...
CVE-2020-13487
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...
Online Discussion Forum Site 1.0 - Remote Code Execution Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Discussion Forum Site 1.0 - Remote Code Execution Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://www.sourcecodester.com/php/14233/online-discussion-forum-site.html Software Link:...
PT-2020-13570
Name of the Vulnerable Software and Affected Versions bbPress plugin versions through 2.6.4 Description The issue concerns stored XSS in the Forum creation section of the bbPress plugin, allowing JavaScript execution at the "wp-admin/edit.php?post type=forum" API endpoint, which is the Forum...
CVE-2020-13487: Improper Neutralization of Input During Web Page Generation
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?posttype=forum aka the Forum listing page for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI...
Online Discussion Forum Site 1.0 Remote Code Execution
Exploit Title: Online Discussion Forum Site 1.0 - Remote Code Execution Google Dork: N/A Date: 2020-05-24 Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://www.sourcecodester.com/php/14233/online-discussion-forum-site.html Software Link:...
File upload vulnerability exists in Swordfish Forum (CNVD-2020-33186)
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. A file upload vulnerability exists in Swordfish Forum, which can be exploited by an attacker to gain administrative privileges on the web server...
Alleged Hacker Behind Massive ‘Collection 1’ Data Dump Arrested
A hacker accused of selling hundreds of millions of stolen credentials from last year’s “Collection 1” data dump on the dark web has been arrested in the Ukraine. The Security Service of Ukraine SSU took into custody a threat actor known as “Sanix,” who they claim posted 773 million e-mail...
This Service Helps Malware Authors Fix Flaws in their Code
Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne'er-do-wells to liberate or else seize...
An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now
If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a critical vulnerability. Maintainers of the vBulletin project recently announced an important patch update but didn't reveal any informatio...
Stored Cross-Site Scripting Vulnerability in Swordfish Forum Ca***.php File
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS, Swordfish Forum program is a completely open source and free forum source code, it is a lightweight and fast php forum source code. Swordfish Forum Ca.php file has a stored cross-site scripting vulnerability...
Hackers Breach 3.5 Million MobiFriends Dating App Credentials
The credentials of 3.5 million users of MobiFriends, a popular dating app, have surfaced on a prominent deep web hacking forum, according to researchers. MobiFriends is an online service and Android app designed to help users worldwide meet new people online. The Barcelona-based developer of...
File upload vulnerability exists in Swordfish Forum (CNVD-2020-28107)
Swordfish Forum System is a light forum system. A file upload vulnerability exists in Swordfish Forum, which can be exploited by an attacker to upload malicious files to gain system administration privileges...
Hackers selling 267 million Facebook records on hacker forum
By Waqas Currently, the trove of 267 million Facebook records are being sold for around $600 on the hacker forum. This is a post from HackRead.com Read the original post: Hackers selling 267 million Facebook records on hacker forum...
forumconstruire.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1146956 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Over half a million Zoom accounts being sold on hacker forum
By Sudais Asif A hacker is selling 500,000 zoom account credentials on the dark web and an infamous hacker forum putting the privacy of users at risk. This is a post from HackRead.com Read the original post: Over half a million Zoom accounts being sold on hacker forum...
4 million Quidd user accounts dumped on hacker forum for download
By Waqas 4 million Quidd user accounts dumped on hacker forum for download - The hacker forum is letting anyone download the data. This is a post from HackRead.com Read the original post: 4 million Quidd user accounts dumped on hacker forum for download...
52k Iranian ID cards with selfies sold on dark web & hacking forum
By Waqas The data is being sold both on the dark web and an infamous hacking forum putting the privacy of thousands of Iranians at risk. This is a post from HackRead.com Read the original post: 52k Iranian ID cards with selfies sold on dark web & hacking forum...