Wordpress Js-Multi-Hotel 插件-refreshDate.php文件-跨站脚本漏洞

No description provided by source...

safe-editor <= 1.1 - Unauthenticated CSS/JS-injection

When saving JS/CSS in this plugin then both private and public ajax-hooks are being used. Because of this anyone can post JS/CSS that are saved to the db and printed to the head and footer portion of the page. PoC In the file "index.php" in root folder on line 188 and 189 you can see that both...

WordPress Safe Editor Plugin <= 1.1 - Multiple Vulnerabilities

This plugin is prone to an unauthenticated CSS and JS injection. The attackers can inject whatever they want when "wpfooter" and "wphead" is called, because "sesave" function is not sanitized. Solution Update the plugin...

The vulnerability of Google Chrome allows a hacker to inject any Web or HTML code they desire.

The vulnerability of the ModuleSystem::RequireForJsInner function extensions/renderer/modulesystem.cc in the Google Chrome browser’s Extensions subsystem exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to injec...

chromium-browser: information leak in v8

The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code...

Regular Expression Denial Of Service

Overview Affected versions of uri-js is susceptible to a regular expression denial of service vulnerability when user input is sent to the .parse method. Recommendation Update to v3.0.0 or later. References - Issue 12 - GitHub Advisory...

DEBIAN-CVE-2016-2086

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header...

Recent js blackmailer anti-killing skills analysis-vulnerability warning-the black bar safety net

Recently many users reflect the computer in a blackmailer virus, also known as the“Locky ransomware”, the computer in documents, pictures and other important information is virus encryption. Such viral vectors for the js script by js script download remote server of the pe file, and that this pe...

BookBox German - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application BookBox German published at the 'play' market has multiple vulnerabilities...

Insecure Default Configuration

Overview Affected versions of airbrake default to sending environment variables over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible for them to capture and read these environment variables, which may result in leaking sensitive...

WordPress User Submitted Posts 20151113 Cross Site Scripting

Exploit Title: WordPress User Submitted Posts Plugin Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: https://plugin-planet.com/ Software Link: https://wordpress.org/plugins/user-submitted-posts/ Version:...

Zomato: Persistent input validation mail encoding vulnerability in the "just followed you" email notification.

This vulnerability allows an attacker to add custom html/js code to emails that are then sent to other users of zomato.com. This vulnerability can be reproduced by any normal user ie. unprivileged accounts by editing their profile's "your full name" field with malicious code. This is not possible...

Sola Support Ticket <= 3.12 - XSS & Configuration Change

Any logged in user with any role and access to wp-admin in any way can update plugin settings including allowing HTML to be parsed. One can also change any notification messages to include JS which then can be used to obtain information by forgery. PoC Make POST request to /wp-admin with paramete...

TrendMicro node.js http server arbitrary command execution vulnerability

Trend Micro is a global leader in network security software and services, leading the trend from desktop antivirus to network server and gateway antivirus with excellent foresight and technological innovation capabilities, and proving Trend Micro's foresight and leadership to the industry with it...

WordPress JS External Link Info <= 1.21 - Open Redirect vulnerability

WordPress JS External Link Info is vulnerable to open redirect vulnerability. Solution This plugin is cloded, you should find an alternative...

Google Chrome V8 Denial of Service Vulnerability (CNVD-2015-08180)

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A security vulnerability exists in the 'BasicJsonStringifier::: SerializeJSArray' function in the json-stringifier.h file in the JSON stringifier of Google V8...

Wordpress Js Support Ticket File Upload Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress "Js Support Ticket" File Upload Bypass Extensions Google Dork: inurl:/js-support-ticket-controlpanel/ Date: 3-12-2015 Exploit Author: Mgm-Eg Vendor Homepage: http://joomsky.com/products/js-supprot-ticket-wp.html Versio...

v8: unspecified out-of-bounds access vulnerability

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have...

WordPress SEO Rank Reporter Plugin <= 2.2.2 - Cross Site Scripting (XSS)

Because of this vulnerability, authenticated administrators can inject html or JS code. Vulnerable parameters are "keyworditem" and "entryurl". Solution Update the plugin...

WordPress GoCodes Plugin <= 1.3.5 - Multiple Vulnerabilities

This plugin is prone to cross site scripting vulnerability, that allows authenticated users to inject HTML and JS code. And also there is an SQL injection vulnerability, that allows authenticated users execute arbitrary SQL commands. Solution Update the plugin...