230 matches found
Code Execution Vulnerability in Axublog Blogging System
axublog is a PHP personal blog system. A code execution vulnerability exists in the Axublog blog system. The vulnerability is caused due to the failure to validate the reloaded files, which can be exploited by an attacker to construct a specially crafted file, upload a shell, and gain...
Turkey Blast: Reloaded - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Turkey Blast: Reloaded published at the 'play' market has multiple vulnerabilities...
Parking Reloaded 3D - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Parking Reloaded 3D published at the 'play' market has multiple vulnerabilities...
Silk Road Reloaded Switches from Tor to I2P Anonymous Network
Multiple successors of the original Silk Road have come and all have been taken offline in recent years, but aside from selling illegal goods and services, they all have had one thing in common – they've all relied on the Tor network. A new version of the anonymous online black market Silk Road,...
wp-table-reloaded <= 1.9.3 - zeroclipboard.swf id Parameter XSS
The WP-Table Reloaded WordPress plugin was affected by a zeroclipboard.swf id Parameter XSS security vulnerability...
Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness
The Subscribe To Comments Reloaded WordPress plugin was affected by an options/index.php managerpage Parameter Stored XSS Weakness security vulnerability...
SWsoft Plesk Reloaded 7.1 - Login_name Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11024/info It is reported that Plesk Reloaded may be affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permi...
WordPress Subscribe To Comments Reloaded插件跨站请求伪造漏洞
WordPress是一款内容管理系统。 应用程序允许用户通过未经验证检查的HTTP请求执行某些操作，攻击者可以利用漏洞在欺骗管理员用户登录特制网页时修改插件设置。 0 WordPress Subscribe To Comments Reloaded Plugin 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：http://wordpress.org/plugins/subscribe-to-comments-reloaded/...
ZeroClipboard 1.0.7 Cross Site Scripting
Hello list! These are Cross-Site Scripting vulnerabilities in ZeroClipboard. Last week I've made my research of these vulnerabilities and informed all developers previous and current of ZeroClipboard. When I've downloaded ZeroClipboard in September 2011, when I was writing my article Attacks via...
[CVE-2013-1463]Wordpress wp-table-reloaded‏ plugin XSS in SWF
Exploit Title: Wordpress wp-table-reloaded plugin XSS in SWF Release Date: 24/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/wp-table-reloaded.latest-stable.zip Vendor Homepage:...
CVE-2013-1463
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
Cross site scripting
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
CVE-2013-1463
Technical details about CVE-2013-1463 are not publicly available in the provided connected documents. The Initial description contains basic context but no concrete product/vendor/version/root-cause/fix details from connected sources. Monitor for updates.
CVE-2013-1463
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
PT-2013-3149 · WordPress +1 · Wp-Table Reloaded
Cross-site scripting XSS vulnerability in js/tabletools/zeroclipboard.swf in the WP-Table Reloaded module before 1.9.4 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be the same vulnerability as CVE-2013-1808. If so, it is likel...
WordPress WP Table Reloaded Plugin - Cross Site Scripting
WP Table Reloaded plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...
WordPress Block-Spam-By-Math-Reloaded Plugin Bypass
$Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass
WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass $Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
WordPress Block-Spam-By-Math-Reloaded Plugin Bypass
No description provided by source. $Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
WordPress Block-Spam-By-Math-Reloaded Plugin Bypass
Exploit for php platform in category web applications $Id: wordpressloginenum.rb 12196 2011-04-01 00:51:33Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...