mb.miniAudioPlayer 1.4.2 - TinyMCE Popup Unspecified Issue

The mb.miniAudioPlayer – an HTML5 audio player for your mp3 files WordPress plugin was affected by a TinyMCE Popup Unspecified Issue security vulnerability...

HTML5 AV Manager 0.2.7 - Arbitrary File Upload

The html5avmanager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

ZooEffect 1.08 - HTTP Referer Reflected XSS

Description The ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 WordPress plugin was affected by a HTTP Referer Reflected XSS security vulnerability...

VideoWhisper Live Streaming Integration 4.27.3 - Multiple Vulnerabilities

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - SQL Injection

This plugin is prone to a playlist/addplaylist.php id parameter SQL injection vulnerability. Solution Update this plugin...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - Stored XSS

This plugin is prone to a playlist/addplaylist.php multiple parameter stored cross site scripting vulnerability. Solution Update the plugin...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - SQL Injection

This plugin is prone to a playlist/addplaylist.php id parameter SQL injection vulnerability. Solution Update this plugin...

WordPress HTML5 jQuery Audio Player Plugin <= 2.3 - Stored XSS

This plugin is prone to a playlist/addplaylist.php multiple parameter stored cross site scripting vulnerability. Solution Update the plugin...

[SECURITY] Fedora 20 Update: guacamole-server-0.8.4-3.fc20

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop prot ocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

HTML5 Canvas Fingerprint — Widely Used Unstoppable Web Tracking Technology

Till Now we have seen many traditional way of tracking web users, such as using cookies that get saved on user’s system may not be available forever to many companies, but a new method of tracking users has emerged that worked without the use of cookies. From last two years, many websites and...

WordPress HTML5 Video Player with Playlist plugin Multiple XSS Vulnerabilities

WordPress HTML5 Video Player with Playlist Plugin is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2014-4534

Multiple cross-site scripting XSS vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 theme or 2 playlistmod parameter...

CVE-2014-4534

The CVE-2014-4534 entry covers multiple XSS vulnerabilities in the WordPress plugin “HTML5 Video Player with Playlist” (versions up to and including 2.4.0). Vulnerable component: videoplayer/autoplay.php; attacker can inject arbitrary script/HTML via the (1) theme or (2) playlistmod parameter. Im...

CVE-2014-4534: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 theme or 2 playlistmod parameter...

PT-2014-5960

Name of the Vulnerable Software and Affected Versions HTML5 Video Player with Playlist plugin versions 2.4.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the theme or playlistmod parameter in the videoplayer/autoplay.php file. This can lead ...

Wordpress HTML5 AV Manager Plugin 0.2.7 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - HTML5 AV Manager for WordPress Shell Upload Vulnerability Version : 0.2.7 Link : http://wordpress.org/extend/plugins/html5avmanager/ Plugins : http://downloads.wordpress.org/plugin/html5avmanager.0.2.7.zip Date : 26-05-2012 Goog...

Wordpress Work-The-Flow Plugin 1.2.1 - Arbitrary File Upload

No description provided by source. !/usr/bin/env python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register from pocsuite.lib.utils.password import getWeakPassword from pocsuite.lib.utils.password import getLargeWeakPasswor...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1491-1)

This seamonkey update to version 2.21 fixes several security and non-security issues : - update to SeaMonkey 2.21 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720 bmo888820 Improper state in HTML5 Tree Builder with templates -...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1065-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2013:1495-1)

This MozillaThunderbird update to version 24.0 fixes several security and non-security issues : - update to Thunderbird 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720 bmo888820 Improper state in HTML5 Tree Builder with...