Rockwellautomation 1763-l16awa Unspecified Vulnerability

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

Beware of Stalking Apps

The Federal Trade Commission FTC has released an article warning consumers of “stalking apps”—spyware that secretly monitors smartphones. These apps can share information like call history, text messages, photos, GPS locations, and browser history without the user's knowledge. Although this can b...

PPTP Server/Device Compromised

The remote PPTP Server/Device might have been compromised by an attacker or a worm. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

CVE-2019-14339

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

Default credentials

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the...

Canon PRINT Information Disclosure Vulnerability

Canon PRINT is a mobile application for controlling and managing printers from Canon Japan. A security vulnerability exists in Canon PRINT version 2.5.5, which arises from the program's failure to properly restrict access to data. The vulnerability can be exploited by an attacker with a malicious...

Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)

Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...

Canon PRINT 2.5.5 - Information Disclosure Exploit

Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339 Date: 24th July, 2019 Exploit Author: 0x48piraj Vendor Homepage: https://www.usa.canon.com/internet/portal/us/home/explore/printing-innovations/mobile-printing/canon-print-app Software Link:...

Canon PRINT 2.5.5 - Information Disclosure

Canon PRINT 2.5.5 - Information Disclosure Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339 Date: 24th July, 2019 Exploit Author: 0x48piraj Vendor Homepage:...

WordPress shortcode-factory plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. shortcode-factory is a plugin that provides ready-to-use shortcodes. An input validation error vulnerability exists in the WordPress...

WordPress shortcode-factory plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. shortcode-factory is a plugin that provides ready-to-use shortcodes. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-15322

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

Design/Logic Flaw

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2019-15322

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2019-15322

Summary: CVE-2019-15322 affects the WordPress plugin “shortcode-factory” prior to version 2.8, which contains a Local File Inclusion vulnerability. Affected software: WordPress shortcode-factory plugin, versions before 2.8. Impact and risk (as stated): Local File Inclusion could allow an attacker...

PT-2019-14051

Name of the Vulnerable Software and Affected Versions WordPress shortcode-factory plugin versions prior to 2.8 Description The issue is related to Local File Inclusion in the shortcode-factory plugin for WordPress. Recommendations For versions prior to 2.8, update the shortcode-factory plugin to...

CVE-2019-15322: Undefined Security Weakness

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2015-9321

The shortcode-factory plugin before 1.1.1 for WordPress has XSS via addqueryarg...

CVE-2015-9321

The CVE-2015-9321 entry applies to the WordPress Shortcode Factory plugin prior to 1.1.1, where an XSS vulnerability is triggered via add_query_arg. The affected component is the shortcode-factory plugin in WordPress; the underlying issue is a cross-site scripting flaw that could enable client-si...

PT-2019-7280

Name of the Vulnerable Software and Affected Versions shortcode-factory plugin versions prior to 1.1.1 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the add query arg function. Recommendations For versions prior to 1.1.1, update to versi...