Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...

CVE-2015-6965

Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...

CVE-2015-6965

The CVE-2015-6965 entry describes multiple CSRF flaws in the WordPress Contact Form Generator plugin (version 2.0.1 and earlier) that allow an attacker to hijack administrator sessions by issuing crafted requests to the cfg_forms page under wp-admin/admin.php. Affected component is the plugin’s a...

Linux/x86 - Create file with permission 7775 and exit Shell Generator

Linux/x86 - Create file with permission 7775 and exit Shell Generator. Shellcode exploit for linx86 platform !/bin/python from sys import argv """ Shellcode Generator... Create file with permission 7775 --------------------------------------------------------------------------------- Disassembly ...

WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found i...

Contact Form Generator <= 2.0.1 - Multiple Cross-Site Request Forgery (CSRF)

The Contact Form Generator : Creative form builder for WordPress WordPress plugin was affected by a Multiple Cross-Site Request Forgery CSRF security vulnerability...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found in the latest version of the plugin for wordpress...

The vulnerability of the OpenSSL library, which allows a hacker to bypass the cryptographic security measures

The vulnerability of the ssl3clienthello function in the OpenSSL library is related to insufficient guarantees for the correct initialization of the pseudorandom number generator before the handshake process. Exploiting this vulnerability allows a malicious actor to bypass cryptographic security...

Metasploit AV Evasion - Metasploit payload generator that avoids most Anti-Virus products

Metasploit payload generator that avoids most Anti-Virus products. Installing git clone https://github.com/nccgroup/metasploitavevasion.git chmod +x the avoid.sh file before use. How To Use ./avoid.sh Then follow the on screen prompts. Features Easily generate a Metasploit executable payload to...

python-oauth2: Uses poor PRNG in nonce

It was found that python-oauth2 did not properly generate random values for use in nonces. An attacker able to capture network traffic of a website using OAuth2 authentication could use this flaw to conduct replay attacks against that website...

The vulnerability of the microprogramming software of the Cisco Nexus 1000V virtual switch allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

Passgen - Random Character Generator Crunch to Crack WPA/WPA2

Passgen is an alternative for the random character generator crunch which attempts to solve cracking WPA/WPA2 keys by randomizing the output opposed to generating a list like so, aaaaaaaa, aaaaaaab, aaaaaac, etc. Example usuage with aircrack-ng python passgen.py -l | sudo aircrack-ng --bssid...

WordPress Aspose Cloud eBook Generator Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Aspose Cloud eBook Generator is a plugin for creating eBook blogs, articles, and other content. An arbitrary file download vulnerability exists in the...

NIST Drops Weak Dual_EC RNG From Official Recommendations

NIST officially has removed the controversial and compromised DualECDRBG from its list of recommended algorithms for generating random numbers. The DualEC random number generator was at the center of a controversy in the security community two years ago after revelations that the National Securit...

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to bypass the device protection mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability

Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Thycotic-SecretServer.html Overview "With the Password Manager Secret Server app, you can access passwords for an EXISTING on-premise Secret Server or Secret Server...

Poor Crypto Dooms Blockchain Android App

Shoddy crypto is being blamed for the loss of Bitcoin for an unnamed number of Blockchain users. Blockchain, one of the busiest Bitcoin wallets, on Thursday released a security update for its Android app correcting the situation. “In rare circumstances, certain versions of the Android operating...

MySQL Enterprise Monitor < 2.3.20 Apache Struts Predictable Token XSRF

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host may be affected by a cross-site request forgery vulnerability due to the token generator failing to adequately randomize the token values. A remote attacker can exploit this by extracting a token from ...