GHSA-J438-45HC-VJHM CSRF and DNS Rebinding in Oasis

Impact What kind of vulnerability is it? Who is impacted? If you're running a vulnerable application on your computer and an attacker can trick you into visiting a malicious website, they could use DNS rebinding and CSRF attacks to read/write to vulnerable applications. There is no evidence that...

Fraction - Less critical - XSS vulnerability - SA-CONTRIB-2018-059

This module enables you to create fields for storing decimal values as two integers numerator and denominator for maximum precision. The module doesn't sufficiently filter XSS strings out of field labels. This vulnerability is mitigated by the fact that an attacker must have a role with the abili...

CVE-2018-6519

The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp...

Fraction Theme < 1.1.2 - Privilege Escalation

This vulnerability allows an attacker either authenticated or unauthenticated to escalate privileges on the site and have an admin account which may lead to a full site takeover. PoC This will enable user registration: https://example.com/wp-admin/admin-ajax.php?action=otsaveoptionscanregister=1...

WordPress Fraction Theme <= 1.1.1 - Multiple vulnerabilities

This theme is prone to a privilege escalation and cross site request forgery vulnerabilities. Because of that, the attackers can have an admin account or takeover the site. Solution Update the theme...

WordPress Fraction Theme 1.1.1 Privilege Escalation

------------------------------------------------------------------------------ WordPress Fraction Theme 1.1.1 Previlage Escalation ------------------------------------------------------------------------------ - Theme Link:...

WordPress Fraction Theme 1.1.1 Privilege Escalation Vulnerability

WordPress Fraction Theme version 1.1.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress Fraction Theme 1.1.1 Previlage Escalation ----------------------------------------------------------------------------...

Fedora Update for kbruch FEDORA-2013-13112

Check for the Version of kbruch OpenVAS Vulnerability Test Fedora Update for kbruch FEDORA-2013-13112 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...