WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities

Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities Google Dork: N/A Date: 09.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage - http://wpsuportplus.byethost7.com/ Software...

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities

WordPress Plugin WP Support Plus Responsive Ticket System 2.0 - Multiple Vulnerabilities Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities Google Dork: N/A Date: 09.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor...

Atmail Webmail 7.2 - Multiple Vulnerabilities

Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber Request:...

Atmail Webmail 7.2 - Multiple Vulnerabilities

Atmail Webmail 7.2 - Multiple Vulnerabilities Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET -...

X (Formerly Twitter): Full path disclosure at ads.twitter.com

Hi there, I noticed a small information disclosure full path disclosure on ads.twitter.com. Steps to reproduce - 1. Login to ads.twitter.com - 2. Start to create a new twitter-follower campaign - 3. Choose to upload a new picture - 4. Turn on your intercepting proxy - 5. Upload a file - 6. You...

XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress

Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

Love It - XSS / Content Spoofing / Path Disclosure

The iloveit WordPress theme was affected by a XSS / Content Spoofing / Path Disclosure security vulnerability...

Studio Zen - Multiple Script Direct Request Path Disclosure

The studiozen WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

Feather12 - Multiple Script Direct Request Path Disclosure

The feather12 WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

Caulk - path disclosure

The caulk WordPress theme was affected by a path disclosure security vulnerability...

yvora - Full Path Disclosure

The yvora WordPress theme was affected by a Full Path Disclosure security vulnerability...

Shotzz - Full Path Disclosure

The shotzz WordPress theme was affected by a Full Path Disclosure security vulnerability...

appius - Full Path Disclosure

The appius WordPress theme was affected by a Full Path Disclosure security vulnerability...

moneymasters - Full Path Disclosure

The moneymasters WordPress theme was affected by a Full Path Disclosure security vulnerability...

onepagewebsite - Full Path Disclosure

The onepagewebsite WordPress theme was affected by a Full Path Disclosure security vulnerability...

Starbox Voting - ajax.php Full Path Disclosure

The Starbox Voting WordPress plugin was affected by an ajax.php Full Path Disclosure security vulnerability...

Activity Log - Full Path Disclosure

The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...

Dewplayer <= 1.2 - dewplayer.php Direct Request Path Disclosure Weakness

The dewplayer-flash-mp3-player WordPress plugin was affected by a dewplayer.php Direct Request Path Disclosure Weakness security vulnerability...

Meta Slider 2.1.6 - Multiple Full Path Disclosure

The Responsive Slider by MetaSlider – Slider and Carousel Plugin for WordPress WordPress plugin was affected by a Multiple Full Path Disclosure security vulnerability...

Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure

The Spam Free WordPress WordPress plugin was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...