3294 matches found
Cross site scripting
The rimons-twitter-widget plugin before 1.3 for WordPress has XSS...
CVE-2017-18533
The Red Hat and other feeds confirm CVE-2017-18533 is an XSS vulnerability in the Rimons Twitter Widget WordPress plugin, affecting versions before 1.3. The vulnerability arises in the rimons-twitter-widget plugin for WordPress and is documented by multiple sources (NVD, CNVD, PRION, CVE listings...
Beers with Talos Ep. #59: The tardy episode
Beers with Talos BWT Podcast episode No. 59 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded 8/2/19 - Yes, I know what today’s date is. We got really busy last week and I am sorry that the podcast is late...
CVE-2017-18533: Improper Neutralization of Input During Web Page Generation
The rimons-twitter-widget plugin before 1.3 for WordPress has XSS...
China Attacks Hong Kong Protesters With Fake Social Posts
Twitter and Facebook say they’ve taken down misinformation campaigns from China that cast pro-democracy activists as ISIS members and cockroaches...
WordPress twitter-cards-meta plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site scripting vulnerability exists in...
WordPress twitter-plugin plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-plugin is a social networking site sharing button plugin used in it. A cross-site scripting vulnerability exists in WordPress...
WordPress twitter-cards-meta plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site request forgery vulnerability exist...
Cerberus Enters the Android Malware Rental Scene
A never-before-seen Android banking trojan, dubbed Cerberus, is being rented out on underground forums by a threat group that likes to engage with the defense community publicly via Twitter. According to a Tuesday posting from ThreatFabric, Cerberus isn’t based on the leaked Anubis source code th...
CVE-2017-18505
The twitter-plugin plugin before 2.55 for WordPress has XSS...
CVE-2017-18503
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...
CVE-2017-18505
The twitter-plugin plugin before 2.55 for WordPress has XSS...
CVE-2017-18503
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...
CVE-2017-18504
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...
Design/Logic Flaw
The twitter-plugin plugin before 2.55 for WordPress has XSS...
Cross site scripting
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...
Cross site request forgery (csrf)
The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...
CVE-2017-18503
The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...
CVE-2017-18503
The CVE-2017-18503 entry concerns the WordPress Twitter Cards Meta plugin (pre-2.5.0). The connected sources confirm a cross-site scripting (XSS) vulnerability in versions prior to 2.5.0 caused by insufficient validation of client-side data. Impact described as enabling attacker‑controlled script...