IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read

IntelBras TELEFONE IP TIP200200 LITE 60.61.75.15 - Arbitrary File Read !/usr/bin/perl -w IntelBras TELEFONE IP TIP200/200 LITE 60.61.75.15 'dumpConfigFile' Pre-Auth Remote Arbitrary File Read Todor Donev 2019 c Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it...

CVE-2018-20987

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...

Design/Logic Flaw

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...

CVE-2018-20987

The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection...

CVE-2018-20987

CVE-2018-20987 affects the Newsletters Lite WordPress plugin. The connected documents confirm a PHP object injection flaw in newsletters-lite before version 4.6.8.6, caused by an insecure deserialization condition in the plugin’s code path. This vulnerability can enable remote code execution or s...

WordPress wp-business-intelligence-lite plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-business-intelligence-lite is a plugin used to create responsive charts. A SQL injection vulnerability exists in the WordPress...

Sql injection

The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection...

CVE-2015-9326

CVE-2015-9326 affects the WordPress plugin wp-business-intelligence-lite prior to version 1.6.3. The vulnerability is a SQL injection in the plugin that could allow an attacker to execute arbitrary SQL commands, with impact described as high (NVD CVSS2: 7.5, high; CVSS3: 9.8, critical). Affected ...

Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability (CNVD-2019-44785)

Huawei Honor10 Lite and Huawei Y9 are both a smartphone from Chinese company Huawei Huawei. A denial-of-service vulnerability exists in Huawei Honor10 Lite Harry-AL00C before 9.1.0.217 C00E215R3P1 and Huawei Y9 Jackman-L23 before 9.1.0.220 C45E3R1P1T8, which can be exploited to cause a dead loop...

WordPress ARPrice Lite plugin cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the core/views/arpriceimportexport.php file in version 2.2 of the WordPr...

CVE-2019-14679

core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...

CVE-2019-14679

core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...

Cross site request forgery (csrf)

core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...

CVE-2019-14679

CVE-2019-14679 concerns the ARPrice Lite WordPress plugin (version 2.2) where core/views/arprice_import_export.php is vulnerable to CSRF via wp-admin/admin.php?page=arplite_import_export. The issue could allow an authenticated user to trigger unintended actions on that page. CVSS details indicate...

CVE-2019-14679

core/views/arpriceimportexport.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arpliteimportexport CSRF...

WordPress MapSVG Lite Plugin Cross Site Request Forgery (CVE-2019-1000003)

A cross site request forgery vulnerability exists in WordPress MapSVG Lite plugin. Successful exploitation of this vulnerability can result in the execution of arbitrary code in the effected system...

WordPress Newsletter Lite plugin <= 4.6.16 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability found in WordPress Newsletter Lite plugin versions = 4.6.16. Solution Update the WordPress Newsletter Lite plugin to the latest available version at least 4.6.18...

Newsletter Lite < 4.6.19 - Multiple Issues

- Lack of CSRF, Authorisation and sanitisation checks in the ajaxloadneweditor function, registered as an AJAX method, can lead to an authenticated reflected XSS issue. - Authenticated Directory Traversal leading to RCE XSS: As an authenticated user with a role as low as a Subscriber, open...

Newsletter Lite < 4.6.19 - Multiple Issues

- Lack of CSRF, Authorisation and sanitisation checks in the ajaxloadneweditor function, registered as an AJAX method, can lead to an authenticated reflected XSS issue. - Authenticated Directory Traversal leading to RCE PoC XSS: As an authenticated user with a role as low as a Subscriber, open...

CVE-2017-9388

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a web user interface that allows a user to manage the device. As a part of the functionality the device firmware file contains a file known as proxy.sh which allows the device to proxy a specific...