3104 matches found
CVE-2015-9490
The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...
CVE-2015-9489
The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information such as userlogin, userpass, and useremail values via a direct request for the wp-content/uploads/tmmdbmigrate/wpusers.dat URI...
CVE-2015-9489
The CVE-2015-9489 entry concerns ThemeMakers Goodnex Premium Responsive theme for WordPress (through 2015-05-15). The connected documents specify that the vulnerability allows remote attackers to obtain sensitive information (user_login, user_pass, user_email) by directly requesting the file wp-c...
Virus Bulletin 2019: VoIP Espionage Campaign Hits U.S. Utilities Supplier
LONDON — A recent attack aimed at a U.S.-based oil, gas and chemical supplier leverages the company’s use of the enterprise-class Asterisk open-source PBX software, used for VoIP services. According to research from Check Point, presented here at Virus Bulletin 2019 on Friday, the attack was firs...
WordPress Zoner - Real Estate premium theme <= 4.1.1 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability found by Vlad Vector Ex.Mi in WordPress Zoner - Real Estate premium theme versions = 4.1.1. Solution Update the WordPress Zoner - Real Estate premium theme to the latest available version at least 4.2...
CVE-2016-10997
CVE-2016-10997 affects the Beauty-Premium Theme 1.0.8 for WordPress. Multiple sources (NVD, Red Hat, CVE lists, WPVulnDB) describe a CSRF flaw in includes/sendmail.php that enables arbitrary file upload. Concretely, the vulnerability arises from CSRF allowing an attacker-controlled request to upl...
Browser Guard combats privacy abuse, tracking, clickbait, and scammers
In July 2018, we introduced the Malwarebytes Browser Extension, a beta plugin for Firefox and Chrome aimed at delivering a safer, faster, and more private browsing experience. Our extension blocked tech support scams, hijackers, pop-up ads, trackers, and more to keep users secure and free from...
CVE-2019-6828
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...
CVE-2019-6809
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...
CVE-2019-6809
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...
Design/Logic Flaw
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 firmware versions prior to V2.90, Modicon M340 firmware versions prior to V3.10, Modicon Premium all versions, Modicon Quantum all versions, which could cause a possible denial of service when reading invalid data from the...
CVE-2019-6828
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...
CVE-2019-6828
CVE-2019-6828 describes an unhandled exception vulnerability (CWE-248) in Schneider Electric Modicon controllers that could cause a denial of service when reading coils and registers over Modbus. Affected products include Modicon M580 (firmware version before v2.90), Modicon M340 (before v3.10), ...
CVE-2019-6809
The CVE affects Schneider Electric Modicon PLCs: M580 (firmware before V2.90), M340 (before V3.10), Premium (all), and Quantum (all). Root cause is CWE-248 Uncaught Exception leading to denial of service when handling invalid data/commands via Modbus/UMAS. Public details in TALOS describe an expl...
WordPress Relevanssi Premium Plugin SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Relevanssi Premium plugin versions prior to 1.14.6.1. The...
CVE-2016-10949
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...
CVE-2016-10949
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...
Sql injection
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...
CVE-2016-10949
The CVE-2016-10949 entry concerns WordPress Relevanssi Premium plugin prior to version 1.14.6.1. The vulnerability is described as a SQL injection that enables unsafe unserialization, potentially affecting the plugin’s database handling. The available connected documents consistently identify the...