5 matches found
EUVD-2016-6771
Malware in sbrugna...
EUVD-2019-19226
Malware in sbrugna...
Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark
Impact A vulnerability in Ghost's oEmbed mechanism allows staff users to exfiltrate data from internal systems via SSRF. Vulnerable versions This vulnerability is present in Ghost v5.99.0 to v5.130.3 to and Ghost v6.0.0 to v6.0.8. Patches v5.130.4 and v6.0.9 contain a fix for this issue. Referenc...
Linux Distros Unpatched Vulnerability : CVE-2017-14724
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery. CVE-2017-14724 Note that Nessus relies on the presence of the packag...
WordPress Uncode plugin <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed vulnerability
Unauthenticated Arbitrary File Read in uncodeadmingetoembed vulnerability discovered by mikemyers in WordPress Theme Uncode versions = 2.9.1.6...