CVE-2019-6715

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...

CVE-2019-6715: Undefined Security Weakness

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data...

pub-originale.fr XSS vulnerability

Open Bug Bounty ID: OBB-718450 Description| Value ---|--- Affected Website:| pub-originale.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

objets-pub-express.com XSS vulnerability

Open Bug Bounty ID: OBB-711199 Description| Value ---|--- Affected Website:| objets-pub-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

gearth.de XSS vulnerability

Open Bug Bounty ID: OBB-610203 Description| Value ---|--- Affected Website:| gearth.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wald-laeufer.de XSS vulnerability

Open Bug Bounty ID: OBB-599418 Description| Value ---|--- Affected Website:| wald-laeufer.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.china-pub.com XSS vulnerability

Open Bug Bounty ID: OBB-582468 Description| Value ---|--- Affected Website:| search.china-pub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cells Blog Cross-Site Scripting Vulnerability (CNVD-2018-00086)

Cells Blog is a free but powerful mini blogging system. A cross-site scripting vulnerability exists in Cells Blog 3.5. An attacker can exploit this vulnerability via the pubreadpost.php fmid parameter to conduct a cross-site scripting attack...

CVE-2017-17949

Cells Blog 3.5 has XSS via the pubreadpost.php fmid parameter...

PT-2017-15121

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to SQL Injection, which can be exploited via the ptid parameter in the "pub readpost.php" endpoint. Recommendations For Cells Blog version 3.5, update to a newer version that contains a f...

PT-2017-15120

Name of the Vulnerable Software and Affected Versions Cells Blog version 3.5 Description The issue is related to a security problem where an attacker can inject malicious code. The fmid parameter in the "pub readpost.php" endpoint is vulnerable to this type of attack. Recommendations For Cells Bl...

[SECURITY] Fedora 24 Update: redis-3.2.8-1.fc24

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

edubourse.com XSS vulnerability

Vulnerable URL: http://www.edubourse.com/divers/moteur.php?cx=partner-pub-0344181344710516:4002401842=FORID:10=ISO-8859-1="alertString.fromCharCode79,80,69,78,66,85,71,66,79,85,78,84,89;...

[SECURITY] Fedora 25 Update: redis-3.2.7-1.fc25

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

dublinsquarepub.com XSS vulnerability

Vulnerable URL: http://www.dublinsquarepub.com/news.php?id=-1%20UNION%20SELECT%201,0x3c7363726970743e616c65727428224f50454e425547424f554e545922293b3c2f7363726970743e,3,4,5,6%20from%20guestbook-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017...

baixaki.com.br XSS vulnerability

Open Bug Bounty ID: OBB-177043 Description| Value ---|--- Affected Website:| baixaki.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress CM Ad Changer 1.7.2 Cross Site Scripting

FULL DISCLOSURE Product : cm-ad-changer Exploit Author : Rahul Pratap Singh Version :1.7.2 Home page Link : https://wordpress.org/plugins/cm-ad-changer/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XSS Vulnerability:...

*TRIAL* Sheepshead at the pub - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application TRIAL Sheepshead at the pub published at the 'play' market has multiple vulnerabilities...

PT-2016-1367

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2e Description The issue is related to the DH check pub key function in the crypto/dh/dh check.c file, which does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange. This makes i...

CVE-2014-7361

The Harry's Pub aka com.emunching.harryspub application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...