9585 matches found
MW Font Changer <= 4.2.5 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The MW Font Changer WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/parsi-font/css.php?size=""...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities | | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in...
Ocim MP3 Plugin - Unauthenticated Reflected Cross-Site Scripting (XSS)
Credits to : Soufiane Boussali PoC http://www.example.com/wp-content/plugins/ocim-mp3/source/pages.php?id=XSSPayload...
JSN PowerAdmin 2.3.0 Code Exection / CSRF / XSS
--------------------------------------------------------- RatioSec Research Security Advisory RS-2016-001 --------------------------------------------------------- JSN PowerAdmin Joomla! Extension Remote Command Execution Via CSRF and XSS vulnerabilities...
[SECURITY] [DSA 3490-1] websvn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3490-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 23, 2016 https://www.debian.org/security/faq -...
WP Advanced Importer Plugin <= 2.1.1 - Reflected Cross-Site Scripting (XSS)
The WP Advanced Importer WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
websvn -- reflected cross-site scripting
Sebastien Delafond reports: Jakub Palaczynski discovered that websvn, a web viewer for Subversion repositories, does not correctly sanitize user-supplied input, which allows a remote user to run reflected cross-site scripting attacks...
Commentator <= 2.5.2 - Reflected Cross-Site Scripting (XSS)
The commentator WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-admin/admin-ajax.php?action=commentatorsocialsignin&provider=facebook"...
Server: Reflected XSS in OCS provider discovery
A Cross-site scripting XSS vulnerability in the OCS discovery provider in ownCloud Servers allows remote attackers to inject arbitrary web script or HTML via the URL resulting in a reflected Cross-Site-Scripting. Since ownCloud employs a strict Content-Security-Policy that forbids inline script...
Auto ThickBox Plus <= 1.9 - Reflected Cross-Site Scripting (XSS)
The auto-thickbox-plus WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/auto-thickbox-plus/download.min.php?file=%3Cscript%3Ealert%281%29%3C/script%3E...
WordPress Contact Form Manager Plugin <= 1.4.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Adobe Issues HotFix For ColdFusion
Adobe this afternoon released hotfixes and security updates for three of its products that patch a handful of vulnerabilities, none of which are being publicly exploited. The most serious vulnerabilities were in ColdFusion, Adobe’s web application development platform. The hotfix affects ColdFusi...
Checkpoint Cross Site Scripting
Exploit Title: Checkpoint.com sub-domains Reflected XSS RXSS Date: 12/11/2015 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.checkpoint.com Version: / Category: Reflected Cross Site Scripting Google dork: Tested on: checkpoint.com sub-domains Checkpoint description :...
WordPress Neuvoo-Jobroll 2.0 Cross Site Scripting
Exploit Title: Wordpress plugin neuvoo-jobroll 2.0 Reflected Cross-Site Scripting RXSS Date: 05/11/2015 Author: Mickael Dorigny @ Synetis Vendor or Software Link: http://neuvoo.fr/fr Version: 2.0 Category: Reflected Cross Site Scripting Google dork: Tested on : Wordpress with neuvoo-jobroll 2.0...
methodOverride Middleware Reflected Cross-Site Scripting
Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the method of the request with the value of the "method" post key or with the header "x-http-method-override". Because the user post input was not...
WordPress PDF And Print Plugin <= 1.7.4 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "bwslicensekey". Solution Upgrade this plugin...
Mango Automation 2.6.0 Remote XSS POST Injection Vulnerability
Summary Mango Automation is a flexible SCADA, HMI And Automation software application that allows you to view, log, graph, animate, alarm, and report on data from sensors, equipment, PLCs, databases, webpages, etc. It is easy, affordable, and open source. Description The application is prone to a...
WP Symposium <= 15.8.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The wp-symposium WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/wp-symposium/getalbumitem.php?size=...