CVE-2014-9413

Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...

CVE-2014-9413

The CVE-2014-9413 entry concerns the WordPress IP Ban plugin (simple-ip-ban) up to version 1.2.3, which has multiple CSRF vulnerabilities that let an attacker hijack an administrator’s session for requests that perform XSS via the ip_list, user_agent_list, or redirect_url parameters on the simple...

WordPress IP Ban Plugin <= 1.2.3 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution Update the plugin...

PT-2014-8998

Name of the Vulnerable Software and Affected Versions simple-ip-ban plugin version 1.2.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the ip list, user agent list, or...

CVE-2014-9413: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the IP Ban simple-ip-ban plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 iplist, 2 useragentlist, or 3 redirecturl...

vBulletin Moderator Control Panel 4.2.2 CSRF

Exploit Title: vBulletin Moderator Control Panel CSRF Google Dork: "Powered by vBulletin® Version 4.2.2" Date: 16-12-2014 Exploit Author: Tomescu Daniel http://daniel-tomescu.com https://rstforums.com/forum Vendor Homepage: http://www.vbulletin.com/en/vb4-features/ Software Link: Premium Version:...

WordPress IP Ban 1.2.3 CSRF / XSS

Title: WordPress 'IP Ban' plugin - CSRF/XSS Version: 1.2.3 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/simple-ip-ban/ Notified WordPress: 2014/11/27 ---------------------------------------------------------------- Description:...

Simple Ip Ban <= 1.2.3 - Multiple CSRF

The IP Ban WordPress plugin was affected by a Multiple CSRF security vulnerability...

CVE-2014-6230

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

CVE-2014-6230

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

PT-2014-7103 · WordPress · Wp-Ban

Name of the Vulnerable Software and Affected Versions: WP-Ban plugin versions prior to 1.6.4 Description: The issue allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header when running in certain configurations. Recommendations: For WP-Ban plugin versions prior to...

CVE-2014-6230

CVE-2014-6230 affects the WordPress WP-Ban plugin, prior to version 1.6.4. The vulnerability arises because the plugin takes the IP address from the X-Forwarded-For header when configured in certain environments, bypassing the plugin’s IP blacklist. This allows remote attackers to bypass bans if ...

CVE-2014-6230: Improper Input Validation

WP-Ban plugin before 1.6.4 for WordPress, when running in certain configurations, allows remote attackers to bypass the IP blacklist via a crafted X-Forwarded-For header...

Information disclosure

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7017

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7017

The CVE-2014-7017 entry describes an Android app, Tim Ban Bon Phuong (com.entertaiment.timbanbonphuong) version 2.2, that does not verify SSL/TLS X.509 certificates. This misconfiguration in the app’s network code enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-7017: Undefined Security Weakness

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

WordPress WP-Ban 1.62 Bypass Vulnerability

WordPress WP-Ban plugin version 1.62 suffers from a bypass vulnerability when a properly minted X-Forwarded-For header is used. Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report:...

WP-Ban < 1.64 BlackList Bypass

The WP-Ban WordPress plugin was affected by security vulnerability...

WordPress WP-Ban 1.62 Bypass

Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report: https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations/ CVE: CVE-2014-6230 CVSS: 5 Medium;...