WordPress HTML5 Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.HTML5 Maps plugin is an interactive maps plugin used in it. Cross-site request forgery vulnerability exists in WordPress HTML5 Maps...

JVN#49575131: WordPress Plugin ”HTML5 Maps” vulnerable to cross-site request forgery

WordPress Plugin ”HTML5 Maps” provided by Fla-Shop.com contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information provided b...

HTML5 Maps <= 1.6.5.6 - CSRF & XSS

The HTML5 Maps WordPress plugin was affected by a CSRF & XSS security vulnerability...

Enhancing video streaming quality for ExoPlayer - Part 1: Quality of User Experience Metrics

Authors: Mark Greve, Domițian Tămaș-Selicean The online video player landscape is fragmented with a wide variety of players across a mix of popular platforms. In the world of HTML5-video players in browsers, there are a number of open-source solutions e.g., hls.js, dash.js, Shaka Player, as well ...

Enhancing video streaming quality for ExoPlayer - Part 1: Quality of User Experience Metrics

The online video player landscape is fragmented with a wide variety of players across a mix of popular platforms. In the world of HTML5-video players in browsers, there are a number of open-source solutions e.g., hls.js, dash.js, Shaka Player, as well as commercial offerings which include Akamai'...

Acunetix Vulnerability Scanner Now With Network Security Scans

User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...

Denial Of Service

Firefox and Firefox ESR are vulnerable to denial of service DoS attacks. This occurs while parsing an HTML5 stream in concert with custom HTML elements which may lead to potentially exploitable crash...

Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

Fedora Update for guacamole-server FEDORA-2019-c692dd910d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow when parsing foreign-context HTML5 fragments...

Arbitrary Code Execution

firefox/thunderbird is vulnerable to arbitrary code execution. A use-after-free vulnerability in the function nsHtml5TreeOperation in xul.dll allows a remote attacker to execute arbitrary code via a second root element to an HTML5 document...

The Ping is the Thing: Popular HTML5 Feature Used to Trick Chinese Mobile Users into Joining Latest DDoS Attack

DDoS attacks have always been a major threat to network infrastructure and web applications. Attackers are always creating new ways to exploit legitimate services for malicious purposes, forcing us to constantly research DDoS attacks in our CDN to build advanced mitigations. We recently...

XooGallery - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: XooGallery - Multiple SQL Injections Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/html5-php-photo-gallery.html Demo Site: http://xooscripts.com/demos/xoogallery/ Version: Lastest Tested on:...

XooGallery - Multiple SQL Injection

XooGallery - Multiple SQL Injection Exploit Title: XooGallery - Multiple SQL Injections Date: 26.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/html5-php-photo-gallery.html Demo Site: http://xooscripts.com/demos/xoogallery/ Version: Lastest Tested on: Ka...

HTML5 Video Player KeyCodeDLL.dll suffers from a buffer overflow vulnerability

HTML5 Video Player is a software for Mac OS. HTML5 Video Player KeyCodeDLL.dll suffers from a buffer overflow vulnerability that can be exploited by attackers to execute arbitrary code...

[SECURITY] Fedora 29 Update: guacamole-server-1.0.0-1.fc29

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop prot ocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

[SECURITY] Fedora 28 Update: guacamole-server-1.0.0-1.fc28

Guacamole is an HTML5 remote desktop gateway. Guacamole provides access to desktop environments using remote desktop prot ocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser. No browser plugins are needed, and no clie...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

Exploit Title : Joomla Furniture Virtuemart Templates 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : ordasoft.com Software Download Link : ordasoft.com/download-furniture-joomla-virtuemart-template Software...

tidy-html5/tidy_fuzzer: Use-of-uninitialized-value in TextEndsWithNewline

Detailed report: https://oss-fuzz.com/testcase?key=5662667379834880 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzermsantidy-html5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: TextEndsWithNewline...

MGASA-2019-0069 Updated thunderbird packages fix security vulnerability

Use-after-free parsing HTML5 stream. CVE-2018-18500 Privilege escalation through IPC channel messages. CVE-2018-18505 Memory safety bugs fixed in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. CVE-2018-18501...