WordPress <= 4.3 - Publish Post & Mark as Sticky Permission Issue

...

Sticky Keys Persistence Module

This module makes it possible to apply the 'sticky keys' hack to a session with appropriate rights. The hack provides a means to get a SYSTEM shell using UI-level interaction at an RDP login screen or via a UAC confirmation dialog. The module modifies the Debug registry setting for certain...

WordPress Plugin Simple Sticky Footer Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server set up their own weblog . Simple Sticky Footer plugin is a footer can be tightly affixed to the bottom of the page plugin . The WordPress plugin Simple Sticky Footer has multiple...

CVE-2014-9454

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attac...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attac...

CVE-2014-9454

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attac...

CVE-2014-9454

The CVE-2014-9454 entry concerns the WordPress plugin Simple Sticky Footer (before version 1.3.3). Multiple CSRF vulnerabilities allow remote attackers to hijack administrator sessions and perform actions such as changing plugin settings, with additional potential XSS via the simple_sf_width and ...

PT-2015-4217

Name of the Vulnerable Software and Affected Versions Simple Sticky Footer plugin versions prior to 1.3.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for...

WordPress Simple Sticky Footer Plugin <= 1.3.2 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution Update the plugin...

CVE-2014-9454: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or conduct cross-site scripting XSS attac...

WordPress Simple Sticky Footer 1.3.2 CSRF / XSS

Title: WordPress 'Simple Sticky Footer' plugin - CSRF/XSS Version: 1.3.2 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/simple-sticky-footer/ Notified WordPress: 2014/11/27 ---------------------------------------------------------------...

WordPress Plugin Sticky Social Bar XSS Vulnerablity

Exploit for php platform in category web applications Exploit Title : WordPress Plugin Sticky Social Bar XSS Vulnerablity Exploit Author : NULLPointer Date : 18/09/2014 Vendor Homepage : http://www.wphub.com/sticky-social-bar-wordpress-plugin/ Version: 1.4.3 Google Dork :...

Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC

No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...

OpenBB 1.0 Unauthorized Moderator Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4823/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reported to be vulnerable to a condition that will allow an...

sethc.exe Possible Backdoor

The copy of 'sethc.exe' in the Windows 'System32' directory on the remote host appears to have been modified, perhaps for use as a backdoor. Either or both of the 'InternalName' or 'OriginalFilename' file attributes no longer match the original file. This file is part of the Windows 'Sticky Keys'...

Fedora Update for sticky-notes FEDORA-2012-18396

Check for the Version of sticky-notes OpenVAS Vulnerability Test Fedora Update for sticky-notes FEDORA-2012-18396 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for sticky-notes FEDORA-2012-18396

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : sticky-notes-0.3.09062012.4-10.fc17 (2012-18396)

Fix some XSS issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 17 Update: sticky-notes-0.3.09062012.4-10.fc17

Sticky notes is a free and open source paste-bin application...

Fedora 18 : sticky-notes-0.3.09062012.4-10.fc18 (2012-18372)

Fix some XSS issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...