3104 matches found
Wordpress NewsGamer Premium Theme - Cross Site Scripting Vulnerability
An xss vulnerability was found in the Wordpress NewsGamer Premium Theme. Usage Info Use your cross site scripting payload Proof of Concept PoC: ======================= wp-content/themes/newsgamer/wp-admin/tinymce/popup.php?popup=alert/xss/ 0day.today 2018-01-08...
CVE-2017-2168
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
JVN#96165722: WordPress plugin "WP Booking System" vulnerable to cross-site scripting
The WordPress plugin "WP Booking System" provided by WP Booking System contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user who logged-in as an administrator. Solution Update the plugin Update the plugin according to...
PT-2017-3701 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon M340 versions affected versions not specified Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum versions affected versions not specified Schneider Electri...
PT-2017-3703 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon BMXNOR0200 affected versions not specified Schneider Electric Modicon M340 affected versions not specified Schneider Electric Modicon Premium affected versions not specified Schneider Electric Modicon Quantum PLC...
PT-2018-19: Authorization Bypass in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200
The specialists of the Positive Research center have detected an Authorization Bypass vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200. Vulnerability allows attackers to bypass authorization using requests to CGI functions. How to fix Use the...
PT-2017-3702 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon Premium versions affected versions not specified Schneider Electric Modicon Quantum PLC versions affected versions not specified Schneider Electric Modicon M340 versions affected versions not specified Schneider...
PT-2017-3704 · Schneider Electric · Modicon Premium +3
Name of the Vulnerable Software and Affected Versions: Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 affected versions not specified Description: A buffer overflow issue exists in the web services that process SOAP requests, potentially allowing a remote...
Portrait Display SDK Service Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation due to insecure service configuration product: Portrait Display SDK Service vulnerable version: mutliple, see PoC fixed version: multiple, see soluti...
eBay Auction Premium Clone Script 6.42 SQL Injection
Title: eBay Auction Premium Clone Script - SQL injection Credit: Bilal KARDADOU Vendor: http://bimedia.info Vendor URL: http://bimedia.info/ebay-auction-premium-clone-script/ Product: eBay Auction Premium Clone Script Demo: http://ebayp.clonedemo.com/ Google Dork: N/A Product & Service...
Premium Penny Auction Script - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Premium Penny Auction Script - SQL Injection Google Dork: N/A Date: 05.04.2017 Vendor Homepage: http://bimedia.info/ Software: http://bimedia.info/premium-penny-auction-script/ Demo: http://pennyauction.clonedemo.com/ Version: N...
Premium Penny Auction Script SQL Injection
Exploit Title: Premium Penny Auction Script - SQL Injection Google Dork: N/A Date: 05.04.2017 Vendor Homepage: http://bimedia.info/ Software: http://bimedia.info/premium-penny-auction-script/ Demo: http://pennyauction.clonedemo.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...
Premium Penny Auction Script - SQL Injection
Exploit Title: Premium Penny Auction Script - SQL Injection Google Dork: N/A Date: 05.04.2017 Vendor Homepage: http://bimedia.info/ Software: http://bimedia.info/premium-penny-auction-script/ Demo: http://pennyauction.clonedemo.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...
Google Eliminates Android Adfraud Botnet Chamois
Google removed a handful of malicious apps from its Play marketplace recently that were found manipulating ad traffic, sending premium text messages, and downloading additional plugins. Bernhard Grill, Megan Ruthven, and Xin Zhao, security software engineers with the company, said Monday they...
Schneider Electric Modicon Devices DoS Vulnerability (SEVD-2017-048-02)
Schneider Electric Modicon devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...
Update Rollup 16 for Azure Site Recovery
Describes the fixes that are included in Update Rollup 16 for Azure Site Recovery.IntroductionThis article describes the fixes that are included in Update Rollup 16 for Azure Site Recovery for the following:Microsoft Azure Site Recovery Provider version 5.1.2150.0Microsoft Azure Site Recovery...
No Azure storage accounts can be found
Challenge When attempting to perform a direct restore to Azure through the Veeam Backup & Replication console, or via PowerShell Get-VBRAzureStorageAccount, no storage accounts can be found, or the specified storage account is not returned. Cause The storage accounts specified are blob storage...
Javo Spot Premium Theme - Unauthenticated Directory Traversal
Print out any file in the via an unauthenticated AJAX request. PoC /wp-admin/admin-ajax.php? jvfrmspotgetjson=../../wp-config.php=jQuery...
WordPress Javo Spot Premium Theme <= 2.0.0 - Unauthenticated Directory Traversal
WordPress Javo Spot Premium Theme = 2.0.0 - Unauthenticated Directory Traversal / Local File Inclusion vulnerability discovered by Soulseekah Solution Update theme to the latest version at least version 2.0.1...
