PT-2015-4369

Name of the Vulnerable Software and Affected Versions ThemePunch Slider Revolution plugin versions prior to 3.0.96 Showbiz Pro plugin version 1.7.1 and earlier Description The issue allows remote attackers to upload and execute arbitrary files, delete arbitrary sliders, and create, update, import...

CVE-2014-8744

Cross-site scripting XSS vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

Cross site scripting

Cross-site scripting XSS vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

CVE-2014-8744

Cross-site scripting XSS vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

CVE-2014-8744

Affected software: Drupal Nivo Slider module, version 7.x-2.x prior to 7.x-1.11. Vulnerable component: the image title handling in the Nivo Slider module allows cross-site scripting. Root cause: insufficient sanitization of image titles permits injection of arbitrary script/HTML by remote authent...

CVE-2014-8744

Cross-site scripting XSS vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

PT-2014-8703

Name of the Vulnerable Software and Affected Versions Nivo Slider module versions 7.x-2.x before 7.x-2.11 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

CVE-2014-8744: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title...

WordPress Slider Revolution - Local File Disclosure

Description Note: The Construct, Echelon, Fusion, Method, Modular and Myriad affected themes are from the Mysitemyway, who went out of business, and the themes have been forked by BackStop Themes who does not use Revslider...

VulnCheck KEV: CVE-2014-9734

Directory traversal vulnerability in the Slider Revolution revslider plugin before 4.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php...

WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability Google Dork: Index of /wp-content/plugins/kbslider Date: 2014-08-21 Exploit Author: MF0x and Daniel Pentest Vendor Homepage:...

WordPress KenBurner Slider Arbitrary File Download

Exploit Title : WordPress Plugin KenBurner Slider Arbitrary File Download Vulnerability Google Dork: Index of /wp-content/plugins/kbslider Date: 2014-08-21 Exploit Author: MF0x and Daniel Pentest Vendor Homepage: http://codecanyon.net/item/responsive-kenburner-slider-jquery-plugin/1633038 Version...

KenBurner Slider - Unauthenticated Arbitrary File Download

The WordPress Plugin called KenBurner Slider suffers from Arbitrary File Download Vulnerability, which could allow an attacker to download the wp-config.php file and others. This issue has been spotted being exploited in the wild...

WordPress Plugin KenBurner Slider - admin-ajax.php Arbitrary File Download

WordPress Plugin KenBurner Slider - admin-ajax.php Arbitrary File Download source: https://www.securityfocus.com/bid/69387/info The KenBurner Slider plugin for WordPress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the w...

WordPress KenBurner Slider Plugin - Arbitrary File Download

KenBurner Slider plugin's "admin-ajax.php" is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Upgrade the plugin...

WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download

source: https://www.securityfocus.com/bid/69387/info The KenBurner Slider plugin for WordPress is prone to an arbitrary file-download vulnerability. An attacker can exploit this issue to download arbitrary files from the web server and obtain potentially sensitive information...

WordPress Slider Revolution Arbitrary File Download Vulnerability

WordPress Slider Revolution is prone to an arbitrary file download vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tor Browser Hardening Features Under Scrutiny

Tor is a target like never before. The NSA has made no bones about its disdain for the anonymity network, and someone, allegedly researchers from Carnegie Mellon University, were recently on the network trying to de-anonymize users of its hidden services. All of this has prompted the keepers of T...

Wordpress Slider Revolution Responsive <= 4.1.4 Arbitrary File Download

Exploit for php platform in category web applications Exploit Title : Wordpress Slider Revolution Responsive = 4.1.4 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/2751380 Software Link : Premium...

Social Slider <= 5.6.5 - social-slider-2/ajax.php rA Parameter SQL Injection

The social-slider-2 WordPress plugin was affected by a social-slider-2/ajax.php rA Parameter SQL Injection security vulnerability...