WordPress Photo Gallery 1.8.5 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Photo Gallery WordPress Plugin ------------------------------------------------------------------------ Umit Aksu, July 2016...

WordPress Peter's Login Redirect Plugin <= 2.9.0 - Multiple Vulnerabilities

Because of this vulnerability, the attackers can change any setting of this plugin, steal Administrators' session tokens or inject arbitrary HTML. Solution Update this plugin...

WordPress Photo Gallery by Supsystic plugin <= 1.8.5 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

WordPress Store Locator Plus 4.5.09 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Store Locator Plus for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Count per Day 3.5.4 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an...

WordPress Plugin Count Per Day 3.5.4 - Persistent Cross-Site Scripting

Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an attacker to perform a wide variety of actions, such a...

WordPress Count Per Day 3.5.4 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Count per Day WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016 -----------------------------------------------------------------------...

WordPress WangGuard Plugin <= 1.7.1 - Cross Site Scripting

Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions. Solution Update the plugin...

WordPress Uji Countdown Plugin <= 2.0.6 - Cross-Site Scripting (XSS)

Because of this vulnerability, attackers can steal Administrators' session tokens, or perform arbitrary actions. Solution Update the plugin...

WordPress WP Live Chat Support 6.2.03 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin ------------------------------------------------------------------------ Dennis Kerdijk & Erwin Kievith , July 2016...

WordPress Easy Testimonials 1.36.1 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress Plugin ------------------------------------------------------------------------ Bente Schopman, July 2016...

Vimeo: Watch any Password Video without password

Hello Jeremy and Vimeo Security Team, There is a vulnerability in Vimeo which allows any user to watch password video without the password. A user can like a passworded video without password, then the user can watch the video on Couchmode without the password. POC link :...

WordPress Google Forms Plugin <= 0.84 - Cross Site Scripting (XSS)

Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

WordPress Simple Membership 3.2.8 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Simple Membership WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Master Slider 2.7.1 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Master Slider WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Email Users 4.8.2 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Email Users WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million active installs. This issue allows an attacker to perform a...

Multiple Huawei OceanStor Products Transmitting Token in Plaintext Vulnerability

Huawei OceanStor 5300 and others are storage products from Huawei, a Chinese company. A security vulnerability exists in multiple Huawei OceanStor products, which originates from a program sending session tokens in plaintext in HTTP headers. A remote attacker could exploit the vulnerability by...

CVE-2016-5722

Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct replay attacks and obtain sensitive information by sniffing the network...

Design/Logic Flaw

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...