3154 matches found
Seo Panel Newsletter 1.2.0 Cross Site Scripting
Exploit Title: Seo Panel Plugin Newsletter 1.2.0 - 'plugins/newsletter/unsubscribemaillist.php email' Cross-site Scripting Google Dork: N/A Date: 15 April 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: http://sp.seopanel.in/...
File Upload Vulnerability in Super CMS
Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and development of a set of products. Super CMS has a file upload vulnerability that can be exploited by attackers to upload malicious w files and gain server privileges...
vBulletin 3.8.4 Zoints SEO 2.3.2 Open Redirection
Exploit Title : vBulletin 3.8.4 Zoints SEO 2.3.2 Computer-Logic Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 01/03/2019 Vendor Homepages : zoints.com computer-logic.org Software Information Links : vbulletin.org/forum/showthread.php?t=127336...
vBulletin 4.x.x DragonByte SEO 2.0.31 Open Redirection
Exploit Title : vBulletin 4.x.x DragonByte SEO v2.0.31 Pro Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/02/2019 Vendor Homepages : vbulletin.com dragonbyte-tech.com Vendor Name : DragonByte Technologies Software Information Link :...
SchoolCMS V2.3.1 Code Execution Vulnerability in Backend Se***.cl***.php
SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in Schoolcms V2.3.1 backend SeoController.class.php. An attacker can exploit this vulnerability to execute arbitrary code...
WordPress Yoast SEO Plugin < 9.2.0 Race Condition Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112515";...
WordPress WP-JS-External-Link-Info 2.2.0 Open Redirection
Exploit Title : WordPress WP-JS-External-Link-Info Plugins 2.2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : finewebdev.com Software Download Link : downloads.wordpress.org/plugin/wp-external-links.1.81.zip...
Google URL Inspection Tool flaw lets anyone inspect URLs without authorization
By Waqas Last year, Google launched its URL Inspection Tool for webmasters using Search Console. The purpose of this tool is to provide information about Google's indexed version of a specific page. However, now, a UK-based Search Engine Optimization SEO specialist Oliver HG Mason has discovered...
WordPress Targeted with Clever SEO Injection Malware
A clever malware built for SEO injection – where a black hat loads up a webpage with spammy links, redirects and ad keywords, unbeknownst to the site owner – has been seen evading detection with an innovative approach that involves appending itself in an unusual place in the back-end code of a...
Domain Name Consolidation - Observations from the Field
Domain Name Consolidation The market and marketing of Web property domain names is changing. Companies prefer to promote top level domains TLDs, have the option of selecting brand-relevant domain extensions e.g. SaaS.com, and no longer need country-relevant domains to optimize search engine resul...
Remote Code Execution (RCE)
yoast/wordpress-seo is vulnerable to remote code execution. An SEO Manager is able to execute arbitrary OS commands via a ZIP import through a race condition vulnerability in unzipfile in admin/import/class-import-settings.php...
WordPress Yoast SEO Plugin Competitive Conditions Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. Yoast SEO wordpress-seo plugin is used in one of the search engine optimization plugin. A competitive conditio...
CVE-2018-19370
A Race condition vulnerability in unzipfile in admin/import/class-import-settings.php in the Yoast SEO wordpress-seo plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import...
CVE-2018-19370
A Race condition vulnerability in unzipfile in admin/import/class-import-settings.php in the Yoast SEO wordpress-seo plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import...
Race condition
A Race condition vulnerability in unzipfile in admin/import/class-import-settings.php in the Yoast SEO wordpress-seo plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import...
CVE-2018-19370
A Race condition vulnerability in unzipfile in admin/import/class-import-settings.php in the Yoast SEO wordpress-seo plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import...
CVE-2018-19370
The CVE-2018-19370 entry concerns Yoast SEO (wordpress-seo) plugin for WordPress, specifically versions before 9.2.0. A race-condition in unzip_file (admin/import/class-import-settings.php) allows an SEO Manager to execute OS commands via a ZIP import. Public sources in the connected documents co...
Yoast SEO <= 9.1 - Authenticated Race Condition
According to the changelog, "Race Condition which leads to command execution, by users with SEO Manager roles."...
WordPress Yoast SEO plugin <= 9.1.0 - Authenticated Command Execution vulnerability
Authenticated Command Execution vulnerability found by Dimopoulos Elias in WordPress Yoast SEO plugin versions = 9.1. Solution Update the WordPress Yoast SEO plugin to the latest available version at least 9.2.0...