CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2015-1000013

The csv2wpec-coupon WordPress plugin version v1.1 is vulnerable to an unauthenticated remote file upload vulnerability. The root cause is that the csv2wpecCoupon_FileUpload.php file fails to properly sanitize user input; while it checks for the x-php mime-type, attackers can bypass this check usi...

CVE-2015-1000000: Unrestricted Upload of File with Dangerous Type

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

CVE-2015-1000001: Unrestricted Upload of File with Dangerous Type

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

PT-2016-3573

Name of the Vulnerable Software and Affected Versions candidate-application-form version 1.0 Description A remote file download issue exists in the candidate-application-form WordPress plugin. Recommendations For version 1.0, at the moment, there is no information about a newer version that...

PT-2016-3568

Name of the Vulnerable Software and Affected Versions mailcwp version 1.99 Description A remote file upload issue has been identified. Recommendations For mailcwp version 1.99, update to a newer version that contains a fix for this issue...

CVE-2015-1000013: Unrestricted Upload of File with Dangerous Type

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

PT-2016-3578

Name of the Vulnerable Software and Affected Versions simple-image-manipulator version 1.0 Description The issue concerns a remote file download in the simple-image-manipulator WordPress plugin. Recommendations For simple-image-manipulator version 1.0, at the moment, there is no information about...

CVE-2015-1000006: Improper Limitation of a Pathname to a Restricted Directory

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2015-1000010: Improper Access Control

Remote file download in simple-image-manipulator v1.0 wordpress plugin...

PT-2016-3581

Name of the Vulnerable Software and Affected Versions csv2wpec-coupon version 1.1 Description A remote file upload issue has been identified. Recommendations For csv2wpec-coupon version 1.1, update to a newer version that contains a fix for this issue...

CVE-2015-1000007: Exposure of Sensitive Information to an Unauthorized Actor

Remote file download vulnerability in wptf-image-gallery v1.03...

PT-2016-3569

Name of the Vulnerable Software and Affected Versions fast-image-adder version 1.1 Description A remote file upload issue exists. Recommendations For version 1.1, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2015-1000005: Improper Limitation of a Pathname to a Restricted Directory

Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin...

CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

EUVD-2016-9191

Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors...

Picosafe Web GUI - Multiple Vulnerabilities

Picosafe Web GUI - Multiple Vulnerabilities - Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page :...

Picosafe Web GUI - Multiple Vulnerabilities

Title : Picosafe Web Gui - Multiple Vulnerabilities - Author : Shahab Shamsi - Vendor : https://github.com/embeddedprojects/picosafewebgui - Category : Webapps - Date : 01.October.2016 Vulnerable page : picosafewebgui/webinterface/js/filemanager/filemanager.php ========================== | Remote...

KeepNote 0.7.8 Remote Command Execution

Title : KeepNote 0.7.8 Remote Command Execution Date : 29/09/2016 Author : R-73eN Twitter : https://twitter.com/r73en Tested on : KeepNote 0.7.8 Kali Linux , and Windows 7 Software : http://keepnote.org/index.shtmldownload Vendor : DESCRIPTION: When the KeepNote imports a backup which is actuallt...

MGASA-2016-0323 Updated wget packages fix security vulnerability

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource CVE-2016-4971. Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only CVE-2016-7098...