CVE-2019-5983

Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5983

Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5983

Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5983

CVE-2019-5983 applies to the WordPress HTML5 Maps plugin (versions

PT-2019-17917 · Unknown · Html5 Maps

Name of the Vulnerable Software and Affected Versions: HTML5 Maps versions 1.6.5.6 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations: For versions 1.6.5.6 and earlier,...

WordPress Plugin "HTML5 Maps" vulnerable to cross-site request forgery

Overview WordPress Plugin "HTML5 Maps" provided by Fla-Shop.com contains a cross-site request forgery vulnerability CWE-352. Daisuke Shimizu of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported this vulnerability to the...

HTML5 Maps <= 1.6.5.6 - CSRF & XSS

The HTML5 Maps WordPress plugin was affected by a CSRF & XSS security vulnerability...

JVN#49575131: WordPress Plugin ”HTML5 Maps” vulnerable to cross-site request forgery

WordPress Plugin ”HTML5 Maps” provided by Fla-Shop.com contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information provided b...

WordPress HTML5 Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.HTML5 Maps plugin is an interactive maps plugin used in it. Cross-site request forgery vulnerability exists in WordPress HTML5 Maps...

Enhancing video streaming quality for ExoPlayer - Part 1: Quality of User Experience Metrics

Authors: Mark Greve, Domițian Tămaș-Selicean The online video player landscape is fragmented with a wide variety of players across a mix of popular platforms. In the world of HTML5-video players in browsers, there are a number of open-source solutions e.g., hls.js, dash.js, Shaka Player, as well ...

Enhancing video streaming quality for ExoPlayer - Part 1: Quality of User Experience Metrics

The online video player landscape is fragmented with a wide variety of players across a mix of popular platforms. In the world of HTML5-video players in browsers, there are a number of open-source solutions e.g., hls.js, dash.js, Shaka Player, as well as commercial offerings which include Akamai'...

Acunetix Vulnerability Scanner Now With Network Security Scans

User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...

Denial Of Service

Firefox and Firefox ESR are vulnerable to denial of service DoS attacks. This occurs while parsing an HTML5 stream in concert with custom HTML elements which may lead to potentially exploitable crash...

Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

Fedora Update for guacamole-server FEDORA-2019-c692dd910d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow when parsing foreign-context HTML5 fragments...

Arbitrary Code Execution

firefox/thunderbird is vulnerable to arbitrary code execution. A use-after-free vulnerability in the function nsHtml5TreeOperation in xul.dll allows a remote attacker to execute arbitrary code via a second root element to an HTML5 document...

The Ping is the Thing: Popular HTML5 Feature Used to Trick Chinese Mobile Users into Joining Latest DDoS Attack

DDoS attacks have always been a major threat to network infrastructure and web applications. Attackers are always creating new ways to exploit legitimate services for malicious purposes, forcing us to constantly research DDoS attacks in our CDN to build advanced mitigations. We recently...

XooGallery - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: XooGallery - Multiple SQL Injections Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/html5-php-photo-gallery.html Demo Site: http://xooscripts.com/demos/xoogallery/ Version: Lastest Tested on:...