TrackR Bravo Information Disclosure Vulnerability

The TrackR Bravo is a Bluetooth item loss prevention device. TrackR Bravo has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Tracking Devices Latest Privacy Risk to Users

Update: TrackR has responded to Rapid7’s disclosure. First, it said it has addressed the authentication issue months ago, but the deprecated call remained online even though it was no longer used by its apps. “We are grateful that Rapid7 brought this possible point of confusion to our attention; ...

TrackR Bravo contains multiple vulnerabilities

Overview TrackR Bravo contains multiple vulnerabilities including sensitive information exposure and missing authentication. Description CWE-313:Cleartext Storage in a File or on Disk - CVE-2016-6538The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in...

Heat Trackr <= 1.0 - XSS

The heat-trackr WordPress plugin was affected by a XSS security vulnerability...

Wordpress heat-trackr plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. heat-trackr is one of the plug-ins that allows the user to display heat maps graphical data represented by the use...

CVE-2016-1000136

Reflected XSS in wordpress plugin heat-trackr v1.0...

CVE-2016-1000136

Reflected XSS in wordpress plugin heat-trackr v1.0...

Cross site scripting

Reflected XSS in wordpress plugin heat-trackr v1.0...

CVE-2016-1000136

CVE-2016-1000136 concerns the WordPress plugin heat-trackr version 1.0, which is affected by a cross-site scripting (XSS) vulnerability. The Nuclei template and related entries describe a flaw accessible through heat-trackr_abtest_add.php that enables an attacker to inject and execute arbitrary J...

CVE-2016-1000136

Reflected XSS in wordpress plugin heat-trackr v1.0...

CVE-2016-1000136: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin heat-trackr v1.0...

WordPress Heat Trackr Plugin <= 1.0 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability via /heat-trackr/heat-trackrabtestadd.php file. Solution Update the plugin...