Prometheus Sensitive Endpoint Detected

Prometheus is an open-source monitoring solution which is designed to record metrics in a dimensional data model to make it available through its own PromQL query language or built-in visualization capabilities. Prometheus offer multiple libraries named 'Exporters' to help exporting these endpoin...

CVE-2021-24767: Cross-Site Request Forgery (CSRF)

The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete them via a CSRF attack...

Clockstone and other CMSMasters Theme File Upload Vulnerabilities

No description provided by source. Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: wp-content/themes/clockstone Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Software Link:...

Vulnerabilities in WordPress Attack Scanner for WordPress

Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress Attack Scanner plugin for WordPress. These are Information Leakage vulnerabilities. This is security plugin. In my 63 advisories about different vulnerabilities in WordPress plugins http://websecurity.com.ua/3397/ I've...

WordPress plugin Attack Scanner Bypass vulnerability

Exploit for php platform in category web applications I want to warn you about security vulnerabilities in WordPress Attack Scanner plugin for WordPress. These are Information Leakage vulnerabilities. This is security plugin. In my 63 advisories about different vulnerabilities in WordPress plugin...

WordPress Theme Clockstone (and other CMSMasters Themes) - Arbitrary File Upload

WordPress Theme Clockstone and other CMSMasters Themes - Arbitrary File Upload Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: "wp-content/themes/clockstone" Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Softwa...

Clockstone and other CMSMasters Theme File Upload Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: "wp-content/themes/clockstone" Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Software Link:...

WordPress Theme Clockstone (and other CMSMasters Themes) - Arbitrary File Upload

Exploit Title: Clockstone and Various other CMSMasters Theme File Upload Vulnerabilities Google Dork: "wp-content/themes/clockstone" Date: 12/18/2012 Exploit Author: DigiP Vendor Homepage: http://cmsmasters.net/ Software Link: http://themeforest.net/item/clockstone-ultimate-wordpress-theme/306607...