CVE-2017-18634

The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...

Code injection

The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...

CVE-2017-18634

CVE-2017-18634 : The Newspaper WordPress theme (before 6.7.2) contains a script injection vulnerability via td_ads[header] to admin-ajax.php. Affected: WordPress site using this theme prior to 6.7.2. Root cause: improper handling of td_ads[header] script injection. Impact (per sources): partial c...

CVE-2016-10972: Improper Privilege Management

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...

CVE-2016-10972

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2017-18634: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...

Heather Mills Gets An Apology and 'Substantial' Settlement in Spyware Case

The 2010-2011 News of the World phone hacking scandal – in which it was revealed that the tabloid dropped malware on celebrity targets’ phones in order to gather dirt for news stories – is still playing out in court. The latest is a settlement for a “substantial” sum paid to Heather Mills and her...

Hacker deletes entire student newspaper website of University of Ottawa

By Uzair Amir A hacker or simply call them a cyber criminal hacked into the independent student newspaper of the University of Ottawa uOttawa "The Fulcrum" and ended up deleting the entire website early Sunday morning. The Fulcrum has been serving the University of Ottawa since 1942 while the...

Discuz Forum System MagaCMS Online Newspaper Reader Plugin has SQL Injection Vulnerability

Discuz! is an online forum system. A SQL injection vulnerability exists in the MagaCMS Online Newspaper Reader plugin for Discuz forum system, which can be exploited by attackers to obtain sensitive information from the database...

Going1up The Newspaper CMS 1998-2019 1.x Open Redirection

Exploit Title : 1up! Software Going1up The Newspaper CMS 1998-2019 1.x Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : going1up.com Software Information Link : going1up.com/main.asp?SectionID=4&SubSectionID=16 Softwa...

WordPress Newspaper theme <= 9.2.2 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Newspaper theme versions = 9.2.2. Solution Update WordPress Newspaper theme to the latest available version at least 9.5...

Newspaper Theme < 9.5 - Cross-Site Scripting (XSS)

Description From the changelog: Newspaper - Version: 9.2.2 fix: XSS Security issue...

nigeriastandardnewspaper.com XSS vulnerability

Open Bug Bounty ID: OBB-718923 Description| Value ---|--- Affected Website:| nigeriastandardnewspaper.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

Malware Attack Crippled Production of Major U.S. Newspapers

A malware attack targeting Tribune Publishing Co. crippled the printing and deliveries of several major newspapers across the U.S. this weekend – including the Los Angeles Times and Wall Street Journal. The virus impacted computer systems of Tribune Publishing Co., which publishes an array of maj...

ageliesergasias.gr XSS vulnerability

Open Bug Bounty ID: OBB-654798 Description| Value ---|--- Affected Website:| ageliesergasias.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| newspaper theme by tagdiv 8.1.1 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

enggwave.com XSS vulnerability

Open Bug Bounty ID: OBB-652984 Description| Value ---|--- Affected Website:| enggwave.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| newspaper theme by tagdiv 8.1.1 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

duta.co XSS vulnerability

Open Bug Bounty ID: OBB-577388 Description| Value ---|--- Affected Website:| duta.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| newspaper theme from tagdiv Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nusantaranews.co XSS vulnerability

Open Bug Bounty ID: OBB-577343 Description| Value ---|--- Affected Website:| nusantaranews.co Open Bug Bounty Program:| Not created yet Vulnerable Application:| newspaper theme from tagdiv Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sneakerbardetroit.com XSS vulnerability

Open Bug Bounty ID: OBB-554092 Description| Value ---|--- Affected Website:| sneakerbardetroit.com Vulnerable Application:| newspaper theme from tagdiv Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:|...

magazeta.com XSS vulnerability

Open Bug Bounty ID: OBB-552785 Description| Value ---|--- Affected Website:| magazeta.com Vulnerable Application:| newspaper theme from tagdiv Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...