6807 matches found
UBUNTU-CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "su...
CVE-2019-17072
The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...
CVE-2019-17072
The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...
CVE-2019-17072: Improper Neutralization of Special Elements used in an SQL Command
The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...
PT-2019-14938
Name of the Vulnerable Software and Affected Versions new-contact-form-widget plugin version 1.0.9 Description The issue is related to SQL Injection, which occurs via the all-query-page.php file. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue...
all-today.ru Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-today.ru website and its users. Following coordinated...
all-in-one-seo-pack 3.2.7 Cross Site Scripting
Exploit Title: all-in-one-seo-pack 3.2.7 - Persistent Cross-Site Scripting Google Dork: inurl:"\wp-content\plugins\all-in-one-seo-pack" Date: 2019-06-13 Exploit Author: Unk9vvN Vendor Homepage: https://semperplugins.com/all-in-one-seo-pack-pro-version Software Link:...
Flare-Emu - Powered by IDA Pro and the Unicorn emulation framework that provides scriptable emulation features for the x86, x86_64, ARM, and ARM64 architectures to reverse engineers
flare-emu marries IDA Pro’s binary analysis capabilities with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible and robust emulator for its supported...
File Upload Vulnerability in Luthor's All Media Platform
Luthor's all-media platform is a comprehensive realization of the integration of media collection, editing, distribution and storage, and provides media users with an efficient work platform that can replace the current collection and editing system, solve the media process, and provide more...
bd.thesciencejob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-973199 Security Researcher garletmarco Helped patch 1540 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting bd.thesciencejob.com website and its users. Followi...
all-sys.co.kr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-962323 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting all-sys.co.kr website and its...
WordPress wp-all-import plugin security feature issue vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. WordPress wp-all-import plugin has a security feature issue...
WordPress wp-all-import plugin cross-site scripting vulnerability (CNVD-2019-28650)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A cross-site scripting vulnerability exists in WordPress wp-all-import...
WordPress wp-all-import plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A SQL injection vulnerability exists in the WordPress wp-all-import...
CVE-2018-20977
The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page...
WordPress wp-all-import plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A cross-site scripting vulnerability exists in WordPress wp-all-import...
PT-2019-10413 · WordPress · All-In-One-Schemaorg-Rich-Snippets
Name of the Vulnerable Software and Affected Versions: all-in-one-schemaorg-rich-snippets plugin versions prior to 1.5.0 Description: The issue concerns a cross-site scripting XSS flaw on the settings page. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or later to resolve...
CVE-2018-20977: Improper Neutralization of Input During Web Page Generation
The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page...