WordPress Download Shortcode Plugin <= 0.2.0 - Arbitrary File Disclosure

This plugin is prone to "file" arbitrary file disclosure vulnerability. Solution Update the plugin...

WordPress Download Shortcode Plugin <= 0.2.0 - Arbitrary File Disclosure

This plugin is prone to "file" arbitrary file disclosure vulnerability. Solution Update the plugin...

SUSE-SU-2015:0945-1 Security update for spacewalk-java, spacewalk-setup

The spacewalk-java and spacewalk-setup packages were updated to fix one security issue: CVE-2014-8162: RPC API XML External Entities file disclosure. bsc922525 Security Issues: CVE-2014-8162...

Magento XML-RPC XXE Arbitrary File Disclosure

The Magento application running on the remote web server is affected by an XML external entity injection XXE vulnerability due to improper parsing of XML data in the ZendXmlRpcServer class. A remote, unauthenticated attacker can exploit this vulnerability to view arbitrary files on the remote hos...

Satellite5: RPC API XML External Entities file disclosure

It was found that the RPC interface in Satellite would resolve external entities, allowing an attacker to conduct XML External Entity XXE attacks. A remote attacker could use this flaw to read files accessible to the user running the Satellite server, and potentially perform other more advanced X...

VeryPhoto Pro for iOS Wifi Interface Module Name Local File Inclusion Vulnerability

VeryPhoto Pro for iOS is a photo album tool. A local file inclusion vulnerability exists in the Wifi Interface Module Handling module name for VeryPhoto Pro for iOS, which allows attackers to exploit the vulnerability to obtain the contents of system files...

Arbitrary File Disclosure and Open Redirect in Bonita BPM

High-Tech Bridge Security Research Lab two vulnerabilities in Bonita BPM Portal Bonita's web interface running by default on port 8080, which can be exploited by remote non-authenticated attacker to compromise the vulnerable web application and the web server on which it is hosted. 1 Path Travers...

SUSE-SU-2015:0863-1 Security update for SUSE Studio

This update provides SUSE Studio 1.3.10, including Amazon's EC2 support for SUSE Linux Enterprise 12 appliances. Additionally, the update includes fixes for the following issues: 904372 - Arbitrary file existence disclosure in sprockets gem CVE-2014-7819 904375 - Arbitrary file existence disclosu...

WordPress Advanced Video Embed File Disclosure

File disclosure vulnerability in WordPress Advanced Video Embed plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress WP Mobile Edition File Disclosure

File disclosure vulnerability in WordPress WP Mobile Edition plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Elasticsearch Arbitrary File Disclosure Vulnerability

Elasticsearch is the Netherlands Elasticsearch company's set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . A security vulnerability exists in Elasticsearch versions prior to 1.5....

DLA-214-1 libxml-libxml-perl - security update

Bulletin has no description...

ManageEngine Applications Manager FailOverHelperServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose files on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the FailOverHelperServlet servlet. The issue lies in the...

WordPress WooCommerce Amazon Affiliates 7.0 Shell Upload / File Disclosure Vulnerabilities

WordPress WooCommerce Amazon Affiliates plugin version 7.0 suffers from file disclosure and remote shell upload vulnerabilities. WooCommerce Amazon Affiliates Wordpress Plugin Unauthenicated Arbitrary File Upload & LFD Link:...

WordPress Crayon Syntax Highlighter Plugin Arbitrary File Disclosure Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Syntax Highlighter is built with PHP and jQuery syntax highlighting monitor . An information disclosure...

WordPress WooCommerce Amazon Affiliates 7.0 Shell Upload / File Disclosure

WooCommerce Amazon Affiliates Wordpress Plugin Unauthenicated Arbitrary File Upload & LFD Link: http://codecanyon.net/item/woocommerce-amazon-affiliates-wordpress-plugin/3057503 Version: 7.0 This Plugin is Vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload...

WordPress WooCommerce Amazon Affiliates - Arbitrary File Upload

This WordPress plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. Solution Update the plugin...

WordPress WooCommerce Amazon Affiliates - Arbitrary File Upload

This WordPress plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. Solution Update the plugin...

WordPress Premium SEO Pack Plugin <= 1.8.0 - Multiple Vulnerabilities

This plugin is prone to a local file disclosure and remote code execution vulnerabilities. Solution Update the plugin...

WordPress Premium SEO Pack 1.8.0 Shell Upload / File Disclosure

Premium SEO Pack Wordpress Plugin Unauthenicated Arbitrary File Upload & LFD Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437 This Plugin is Vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. Vulnerability CodeShorted: class...