398 matches found
CVE-2017-9062
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...
CVE-2017-9065
In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...
CVE-2017-9062
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...
CVE-2017-9065: Improper Input Validation
In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API...
CVE-2017-9062: Improper Neutralization of Input During Web Page Generation
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
...
WordPress <=4.7.4 - Post Meta Data Values Improper Handling in XML-RPC API
WordPress versions starting from 2.5 to 4.7.4 have the improper handling of post meta data values in the XML-RPC Remote Procedure Call API. Discovered and reported by Sam Thomas. Solution Update WordPress core to the latest possible version at least 4.7.5...
The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure
The vulnerability of the phppgsqlmetadata function pgsql.c in the PostgreSQL interpreter for PHP is related to errors during the checking of table names. Exploiting this vulnerability allows a malicious actor to cause service failure such as deallocation of memory or termination of the applicatio...
Vimeo: Private, embeddable videos leaks data through Facebook & Open Graph
Clip meta-data disclosed to thrid-party crawlers...
WordPress WP Invoice Plugin <= 4.1.0 - Multiple Vulnerabilities
This plugin is prone to unauthorized setting changes, retrieving invoices of arbitrary users, updating previously invoiced users meta data and privilege escalation of logged in users. Solution Update the plugin...
WP-Invoice <= 4.1.0 - Multiple Vulnerabilities
WP-Invoice plugin = 4.1.0 contains multiple security vulnerabilities that include information disclosure, unauthorised updating of meta data, and privilege escalation...
AVG Antivirus Plans to Collect & Sell Your Personal Data to Advertisers
We at The Hacker News are big fans of Security Software – The first thing we install while setting our Computers and Devices. Thanks to Free Security Software that protects Internet users without paying for their security. But, Remember: Nothing comes for FREE "Free" is just a relative term, as o...
Vulnerability in Citrix XenServer Could Result in Information Disclosure (CTX201717)
A vulnerability has been identified in Citrix XenServer which could, if exploited, allow a malicious administrator of an HVM guest VM to obtain meta-data about their own VM. Citrix is presently unaware of any meta-data that might be leaked that would be of value to a malicious guest administrator...
UBUNTU-CVE-2015-4644
The phppgsqlmetadata function in pgsql.c in the PostgreSQL aka pgsql extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service NULL pointer dereference and...
RAWR - Rapid Assessment of Web Resources
Features A customizable CSV containing ordered information gathered for each host, with a field for making notes/etc. An elegant, searchable, JQuery-driven HTML report that shows screenshots, diagrams, and other information. A report on relevent security headers, courtesy of SmeegeSec. a CSV Thre...
CapTipper - Malicious HTTP traffic explorer tool
CapTipper is a python tool to analyze, explore and revive HTTP malicious traffic. CapTipper sets up a web server that acts exactly as the server in the PCAP file, and contains internal tools, with a powerful interactive console, for analysis and inspection of the hosts, objects and conversations...
CeWL - Custom WordList Generator Tool for Password Cracking
CeWL is a ruby app which spiders a given url to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper. CeWL also has an associated command line app, FAB Files Already Bagged which uses the same meta...
Smartphones cache poses huge risk for Cloud Storage Security
A couple of years ago, the tech world was abuzz about the cloud. Cloud computing refers to computing where the processing or storage takes place on a networked series of computers rather than on the device that you're using. Whether you're using a PC, laptop, tablet, smartphone, television, or...
Smartphones cache poses huge risk for Cloud Storage Security
A couple of years ago, the tech world was abuzz about the cloud. Cloud computing refers to computing where the processing or storage takes place on a networked series of computers rather than on the device that you’re using. Whether you’re using a PC, laptop, tablet, smartphone, television, or...
Debian Security Advisory DSA 2559-1 (libexif)
The remote host is missing an update to libexif announced via advisory DSA 2559-1. OpenVAS Vulnerability Test $Id: deb25591.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2559-1 libexif Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...