Open-Web-Analytics-1.5.7 Cryptographic, Password Disclosure & XSS Vulnerabilities

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-OPENWEBANALYTICS0721.txt Vendor: ================================ www.openwebanalytics.com Product: ================================ Open-Web-Analytics-1.5.7 Advisory...

WP Slimstat <= 4.1.5.2 - Referer Header Cross-Site Scripting (XSS)

The Slimstat Analytics WordPress plugin was affected by a Referer Header Cross-Site Scripting XSS security vulnerability...

Open Web Analytics 1.5.7 Multiple Vulnerabilities

Open Web Analytics version 1.5.7 suffers from password disclosure, weak cryptographic control, and cross site scripting vulnerabilities. + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-OPENWEBANALYTICS0721.txt Vendor:...

Open Web Analytics 1.5.7 XSS / Password Disclosure / Crypto Weakness

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-OPENWEBANALYTICS0721.txt Vendor: ================================ www.openwebanalytics.com Product: ================================ Open-Web-Analytics-1.5.7 Advisory...

Oracle Java SE CVE-2015-2590 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 6u95, Java SE 7u80, Java SE 8u45, Java SE...

WordPress S3Bubble Amazon S3 Video And Audio Streaming With Analytics Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.S3Bubble Amazon S3 Video And Audio Streaming With Analytics is a plugin for getting secure streaming from Amazon S3 to the Wordpress website in a plugin...

S3Bubble Cloud Video With Adverts & Analytics <= 0.7 - Arbitrary File Download

Description The 3bubble-amazon-s3-html-5-video-with-adverts WordPress plugin was affected by an Arbitrary File Download security vulnerability...

Wordpress S3Bubble Cloud Video With Adverts & Analytics 0.7 - Arbitrary File Download Vulnerabil

Exploit for php platform in category web applications Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage:...

S3Bubble Amazon S3 Video And Audio Streaming With Analytics <= 2.0 - Arbitrary File Download

The s3bubble-amazon-s3-audio-streaming WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WordPress S3Bubble Cloud Video With Adverts / Analytics Arbitrary File Download

Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: https://s3bubble.com Software Link:...

WordPress Plugin S3Bubble Cloud Video With Adverts Analytics 0.7 - Arbitrary File Download

WordPress Plugin S3Bubble Cloud Video With Adverts Analytics 0.7 - Arbitrary File Download Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author:...

Cisco Acquires OpenDNS for $635 Million

Cisco continues to spend on security, today announcing its intent to acquire San Francisco-based OpenDNS for $635 million. OpenDNS’ domain name system and cloud-based security services bring threat data collected from those platforms to Cisco’s security offerings. “To build on Cisco’s advanced...

Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability

Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. A cross-site request forgery vulnerability exists in Cisco DCAF version 1.4. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

CVE-2015-4189

Cisco Data Center Analytics Framework (DCAF) 1.4 contains a Cross-Site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack the authentication of arbitrary users (Bug ID CSCun26807). Affected product: DCAF 1.4. Root cause: CSRF protection insufficiency enabling unautho...

CVE-2015-4189: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

Cisco Data Center Analytics Framework Cross-Site Request Forgery Vulnerability

A vulnerability in the Data Center Analytics Framework DCAF application could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the us...

RSA Web Threat Detection Cross-Site Request Forgery Vulnerability

RSA Web Threat Detection is a big data and security analytics solution. RSA Web Threat Detection suffers from a cross-site request forgery vulnerability that an attacker could exploit by tricking a user into clicking on a constructed link or browsing to a malicious Web site, resulting in the...

WordPress Google Analytics by Yoast Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.Google Analytics by Yoast is one of the website analytics plugins. An HTML injection vulnerability exists in the WordPress Google Analytics by Yoast plugin, which allows remot...

Code injection

The automatic signature update functionality in the 1 Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the 2 Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0...