Video Player Ultimate(HD) - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Video Player UltimateHD published at the 'play' market has multiple vulnerabilities...

Ultimate To-Do List - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate To-Do List published at the 'play' market has multiple vulnerabilities...

WordPress WP Ultimate Exporter 1.0 / 1.1 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After reading bugtraq post1 I noticed additional vulnerability from WordPress plugin wp-ultimate-exporter2. Versions 1.0 and 1.1 are affected of SQL injection vulnerability without authentication. 1: http://seclists.org/bugtraq/2016/Feb/172 2:...

WordPress WP Ultimate Exporter Plugin <= 1.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress WP Ultimate Exporter Plugin <= 1.0.0 - XSS

This plugin is prone to a cross site scripting vulnerability, because "exportname" and "exportposttypename" parameters are not sanitized. Solution Update the plugin...

WP Ultimate Exporter 1.0.0 - Reflected Cross-Site Scripting (XSS)

The Export WordPress Data with Advanced Filters WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress WP Ultimate Exporter 1.0 Cross Site Scripting

FULL DISCLOSURE Product : WP Ultimate Exporter Exploit Author : Rahul Pratap Singh Version : 1.0 Home page Link : https://wordpress.org/plugins/wp-ultimate-exporter/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 24/Feb/2016 XSS Vulnerability:...

Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder Vendor: Wieland Electric GmbH Product web page: http://www.wieland-electric.com Affected version: 4.1 Build 9 Summary: Your new software for the configuration of Wieland terminal rails. wieplan enables you to plan a complet...

WordPress Ultimate CSV Importer 3.8.6 Cross Site Scripting

FULL DISCLOSURE Product : WP-Ultimate CSV Importer Exploit Author : Rahul Pratap Singh Version : 3.8.6 Home page Link : https://wordpress.org/plugins/wp-ultimate-csv-importer Website Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date Date : 27/Jan/201...

FTPShell Client 5.24 - Add to Favorites Buffer Overflow

FTPShell Client 5.24 - Add to Favorites Buffer Overflow Exploit Title: FTPShell Client 5.24 - Add to Favorites Buffer Overflow Google Dork: N/A Date: 2015-01-04 Exploit Author: INSECT.B Twitter : @INSECT.B Facebook : https://www.facebook.com/B.INSECT00 Blog : http://binsect00.tistory.com Vendor...

FTPShell Client 5.24 - Add to Favorites Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: FTPShell Client 5.24 - Add to Favorites Buffer Overflow Google Dork: N/A Date: 2015-01-04 Exploit Author: INSECT.B Twitter : @INSECT.B Facebook : https://www.facebook.com/B.INSECT00 Blog : http://binsect00.tistory.com Vendor...

EasyCafe Server 2.2.14 Remote File Read

!/usr/bin/python -w Title : EasyCafe Server = 2.2.14 Remote File Read Date : 25/12/2015 Author : R-73eN Tested on : Windows 7 Ultimate Software Link : http://www.tinasoft.com/easycafe/ Vulnerable Versions : EasyCafe Server = 2.2.14 EasyCafe Server has a feature to upload file from the server to a...

Ultimate Member WordPress插件反射型跨站脚本漏洞

No description provided by source...

WordPress Ultimate Member 1.3.28 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Ultimate Member WordPress plugin Vendor: Ultimate Member Vulnerable Versions: 1.3.28 and probably prior Tested Version: 1.3.28 Advisory Publication: October 29, 2015 without technical details Vendor Notification: October 29, 2015 Vend...

WordPress Ultimate Member 1.3.28 Cross Site Scripting

Advisory ID: HTB23277 Product: Ultimate Member WordPress plugin Vendor: Ultimate Member Vulnerable Versions: 1.3.28 and probably prior Tested Version: 1.3.28 Advisory Publication: October 29, 2015 without technical details Vendor Notification: October 29, 2015 Vendor Patch: October 31, 2015 Publi...

Ultimate Member < 1.3.29 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Ultimate Member Plugin <= 1.3.28 - Reflected Cross Site Scripting

Because of this vulnerability, attackers cat steal administrator's cookies, credentials and browser history and modify web page content to perform phishing attacks. Solution Update the plugin...

Ultimate Member WordPress Plugin Reflective Cross-Site Scripting Vulnerability

Ultimate Member is a plugin for creating online communities and user templates for WordPress. Ultimate Member 1.3.28 and earlier versions do not effectively filter the value of the "refer" HTTP GET parameter of "wp-admin/users.php" when "update" is set to "confirmdelete", which allows an...

ultimate-torrent.com XSS vulnerability

Vulnerable URL: http://www.ultimate-torrent.com/torrents/search/testy" Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 262581 Google Pagerank| 0 VIP websit...

Windows Media Center - Command Execution (MS15-100) Vulnerability

Exploit for windows platform in category remote exploits Title: MS15-100 Windows Media Center Command Execution Date : 11/09/2015 Author: R-73eN Software: Windows Media Center Tested : Windows 7 Ultimate CVE : 2015-2509 banner = "" banner += " \n" banner +=" | | / | / | / \ | | \n" banner +=" | |...