CVE-2016-7111: Improper Neutralization of Input During Web Page Generation

MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

[SECURITY] Fedora 24 Update: kf5-libgravatar-16.08.2-1.fc24

Gravatar support library...

Automattic: Remove anyone's pic gravtar

Hi, There is no csrf token while removing image Attacker can Delete Victim's Gravtar Image Just by sending Link Poc: https://en.gravatar.com/emails/remove-userimage/youemailimageid here Thanks :...

Automattic: XSS on gravatar

Hello team of Wordpress! I am Simone and I am here to report a XSS on gravatar! I think that you don't believe me, but it's true, because I have found 171 XSS with different directory and parametrers! Let's the details: Vulnerability:XSS. Severity:High. Vulnerability description: Cross site...

Invision Power Board 1.x?2.x3.x - Admin Takeover

Invision Power Board 1.x?2.x3.x - Admin Takeover IPB Invision Power Board all versions 1.x? / 2.x / 3.x Admin account Takeover leading to code execution Written on : 2013/05/02 Released on : 2013/05/13 Author: John JEAN @johnjean on twitter Affected application: Invision Power Board = 3.4.4 Type ...