WPScan - WordPress Security Scanner

WPScan is a black box WordPress vulnerability scanner. Features Username enumeration from author querystring and location header Weak password cracking multithreaded Version enumeration from generator meta tag and from client side files Vulnerability enumeration based on version Plugin enumeratio...

Page Properties Report showing restricted items

Pages using the Page Properties control that are restricted, still display in a page with the Page Properties Report control when they should not. To clarify: A page with the Page Properties Report control that is unrestricted, shows all of the relevant pages within it. However a few of the pages...

OPC UA Delete Monitored Items Request Command

...

OPC UA Modify Monitored Items Response Command

...

OPC UA Create Monitored Items Response Command

...

OPC UA Create Monitored Items Request Command

...

OPC UA Modify Monitored Items Request Command

...

OPC UA Delete Monitored Items Response Command

...

CVE-2013-0324

Cross-site scripting XSS vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the "Administer menus and menu items" permission to inject arbitrary web script or HTML via the menu link title...

gpEasy CMS - XSS Vulnerability

gpEasy CMS, http://www.gpeasy.com/ Easy to use True WYSIWYG Editing. Flat-file data storage and advanced resource management for fast websites. 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

PT-2012-6013

Name of the Vulnerable Software and Affected Versions Drupal Commerce Extra Panes module versions 7.x-1.x before 7.x-1.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra...

CVE-2012-5542: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to...

CVE-2011-4605

The 1 JNDI service, 2 HA-JNDI service, and 3 HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly...

TomatoCart with PayPal Express Checkout design flaw vulnerability

Overview TomatoCart 1.1.7 with PayPal Express Checkout, and possibly other versions, contains a design flaw that may allow an attacker to purchase items for free or less than advertised. Description It has been reported that TomatoCart 1.1.7 using the PayPal Express Checkout module in sandbox mod...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in unspecified services in IBM Rational Team Concert RTC 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items...

CVE-2012-0748

Multiple cross-site request forgery CSRF vulnerabilities in unspecified services in IBM Rational Team Concert RTC 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items...

CVE-2012-0748: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in unspecified services in IBM Rational Team Concert RTC 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items...

PT-2012-2839

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert RTC versions prior to 4.0.0.1 Description The issue affects unspecified services in IBM Rational Team Concert, allowing remote attackers to hijack the authentication of arbitrary users for requests that modify work...

PT-2012-5540

Name of the Vulnerable Software and Affected Versions NeoInvoice affected versions not specified Description The issue is related to a SQL injection vulnerability in the application/controllers/invoice.php file. This vulnerability might allow remote attackers to execute arbitrary SQL commands via...

USN-1540-1: NSS vulnerability

Kaspar Brand discovered a vulnerability in how the Network Security Services NSS ASN.1 decoder handles zero length items. If the user were tricked into opening a specially crafted certificate, an attacker could possibly exploit this to cause a denial of service via application crash...