WordPress NextGen Gallery Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress PlugIn NextGen...

Design/Logic Flaw

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

CVE-2013-6180

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

WordPress NextGen Smooth Gallery Cross Site Scripting

Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress nextgen-smooth-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link :...

NextGEN Gallery 1.9.12 Shell Upload

S21Sec Advisory - Title: NextGEN Gallery 1.9.12 Arbitrary File Upload ID: S21SEC-046-en CVE ID: CVE-2013-3684 Severity: High Status: Fixed History: 27.May.2013 Vulnerability discovered 28.May.2013 Vendor informed 12.Jun.2013 Fix released Authors: Marcos Agüero [email protected] URL:...

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files t...

WordPress NextGEN Gallery - Arbitrary File Upload

NextGEN Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...

AVG Official Blog Cross Site Scripting

Title : Cross Site Scripting in AVG Official Blog Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: 6/5/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web Apps Vect...

WordPress NextGEN Gallery Plugin - Path Disclosure Vulnerability

This NextGEN Gallery plugin is prone to a path-disclosure vulnerability. It allows anr attacker to obtain sensitive information that may lead to further attacks. Solution Update the plugin...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

WordPress Plugin NextGEN Gallery - Full Path Disclosure source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. NextGEN Gallery versions 1.9.10 and 1.9.11 are vulnerable...

Wordpress NextGEN Gallery 1.9.10 Arbitrary File Upload Exploit (win)

An attacker can use this C++-Exploitcode to upload some file shellcode for example to compromise the system. This is private exploit. You can buy it at https://0day.today...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

WordPress NextGEN Gallery Plugin - Cross Site Scripting

WordPress NextGEN Gallery plugin's "test-head" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress NextGEN Gallery 1.9.5 Cross Site Scripting

Title: ====== NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities Date: ===== 2012-08-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=693 VL-ID: ===== 693 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

WordPress NextGen Cu3er Gallery Information Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities

Document Title: =============== NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=693 Release Date: ============= 2012-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 693...