WordPress Plugin Cerber Security_ Antispam Malware Scan 8.0 - Multiple Bypass Vulnerabilities

WordPress Plugin Cerber Security Antispam Malware Scan 8.0 - Multiple Bypass Vulnerabilities Exploit Title: WordPress Cerber Security, Antispam & Malware Scan - Multiple Bypass Vulnerabilities Type: WordPress Plugin Date: 2019-03-04 Active installs: 100,000+ Version: 8.0 Software Link:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to...

CVE-2014-5034

Cross-site request forgery CSRF vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to...

CVE-2014-5034

The CVE concerns WordPress Brute Force Login Protection plugin (version ~1.3) where a Cross-Site Request Forgery (CSRF) flaw allows remote attackers to hijack user authentication by crafting requests to the plugin’s brute-force-login-protection page (affecting wp-admin/options-general.php). Affec...

CVE-2014-5034

Cross-site request forgery CSRF vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to...

CVE-2014-5034: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to...

WordPress Brute Force Login Protection plugin <= 1.5.2 - Reflected Cross-Site Scripting (XSS) Vulnerability

WordPress Brute Force Login Protection plugin Reflected Cross-Site Scripting XSS vulnerability exists on the plugin’s setting page. This vulnerability occurs in the function showSettingsPage in the file /brute-force-login-protection.php. Solution Update the plugin to version 1.5.3...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-28 Vulnerability Laboratory ID VL-ID: ====================================...

PT-2018-4249

Name of the Vulnerable Software and Affected Versions Brute Force Login Protection module version 1.3 for WordPress Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack user authentication for requests with unknown impact. This is achieved through a...

WordPress Brute Force Login Protection plugin <= 1.5.3 - Arbitrary IP Removal/Add via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary IP Removal/Add via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Brute Force Login Protection plugin versions = 1.5.3. Solution Deactivate and delete. This plugin has been closed as of April 7, 2022 and is not available for download. This closure is temporary,...

CVE-2012-3888

The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data...

Design/Logic Flaw

The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass value within JSON data...

CVE-2012-3888

The CVE-2012-3888 entry corresponds to AirDroid 1.0.4 beta, where the login implementation allows remote bypass of the multiple-login protection by modifying a pass value in JSON data. Exploitation details are not provided beyond this manipulation vector; in-the-wild status is not stated. Publicl...

Brute force protection on JIRA 4.1 leaks valid account names

The brute force login protection in JIRA only activates when a real user account is accessed. This can be used by an attacker to harvest a list of valid logins on the system. The brute force login protection should activate when either the login or the password is wrong...