CVE-2018-10300

CVE-2018-10300 affects the WordPress plugin WD Instagram Feed (Web-Dorado) for WordPress, specifically versions before 1.3.1. The漏洞 is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML by supplying payloads in an Instagram profile bio. The impact...

CVE-2018-10300

Cross-site scripting XSS vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio...

CVE-2018-10301

CVE-2018-10301 : Cross-site scripting in the WordPress plugin WD Instagram Feed Premium (Web-Dorado) for WordPress. The vulnerability exists before version 1.3.1 and allows remote attackers to inject arbitrary script/HTML by submitting payloads in comments on an Instagram post. Impact is XSS in p...

aplicacionesutiles.com XSS vulnerability

Open Bug Bounty ID: OBB-576375 Description| Value ---|--- Affected Website:| aplicacionesutiles.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

instagram-web.eu XSS vulnerability

Open Bug Bounty ID: OBB-576114 Description| Value ---|--- Affected Website:| instagram-web.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Instagram Feed plugin <=1.5.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found Dumpcore in WordPress Instagram Feed plugin versions =1.5.1. Solution Update the WordPress Instagram Feed plugin to the latest available version at least 1.6...

You are not alone Facebook and Instagram are down for many

By Carolina You are not alone, Facebook and Instagram are down for This is a post from HackRead.com Read the original post: You are not alone Facebook and Instagram are down for many...

Instagram info disclosure (email + phone) 0day Exploit

Usage Info 1.make the files from exploit codes 2.host them on your web 3.you're all set! This is private exploit. You can buy it at https://0day.today...

Instagram Feed <= 1.5.1 - Cross-Site Scripting (XSS)

The Smash Balloon Social Photo Feed WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

abisko.net XSS vulnerability

Open Bug Bounty ID: OBB-527255 Description| Value ---|--- Affected Website:| abisko.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

musicalma.es XSS vulnerability

Open Bug Bounty ID: OBB-527253 Description| Value ---|--- Affected Website:| musicalma.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Happy 15th Birthday TaoSecurity Blog

Today, 8 January 2018, is the 15th birthday of TaoSecurity Blog! This is also my 3,020th blog post. I wrote my first post on 8 January 2003 while working as an incident response consultant for Foundstone. I don't believe I've released statistics for the blog before, so here are a few. Blogger...

Instagram-Py - Simple Instagram Brute Force Script

Instagram-Py is a simple python script to perform basic brute force attack against Instagram , this script can bypass login limiting on wrong passwords , so basically it can test infinite number of passwords. Instagram-Py is proved and can test over 6M passwords on a single instagram account with...

WordPress mgl-instagram-gallery plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site. mgl-instagram-gallery plugin is used in one of the responsive gallery plugin. A cross-site scripting...

CVE-2017-17869

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

CVE-2017-17869

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

Design/Logic Flaw

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

CVE-2017-17869

The CVE-2017-17869 entry concerns the WordPress plugin mgl-instagram-gallery . A Cross‑Site Scripting (XSS) vulnerability exists in the plugin’s single-gallery.php file via the media parameter, as described by CVE entries and CNVD/NVD records. The issue is caused by handling the media parameter i...

yogastudiongotland.se XSS vulnerability

Open Bug Bounty ID: OBB-457675 Description| Value ---|--- Affected Website:| yogastudiongotland.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

WordPress mgl-instagram-gallery Plugin Cross Site Scripting Vulnerability

Exploit for php platform in category web applications + Title: WordPress mgl-instagram-gallery Plugin Cross Site Scripting XSS + Author: Mostafa Gharzi + Vendor Homepage: www.Wordpress.org , www.pluginu.com/mgl-instagram-gallery/ + Tested on: Windows 10 & Kali Linux + Vulnerable File:...