WordPress Adblock Blocker Plugin <= 0.0.1 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution No fix available...

WordPress Adblock Blocker Plugin <= 0.0.1 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability. Solution No fix available...

WordPress All In One SEO Pack 2.3.6.1 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin ------------------------------------------------------------------------ David Vaartjes, July 2016...

WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting

WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPres...

WordPress All in One SEO Pack 2.3.6.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million activ...

WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million active installs. This issue allows an attacker to perform a...

Blacklist Plus - Call Blocker - Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Blacklist Plus - Call Blocker published at the 'play' market has multiple vulnerabilities...

blocking SMS, call blocker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application blocking SMS, call blocker published at the 'play' market has multiple vulnerabilities...

Anti Nuisance-Call&SMS Blocker - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Anti Nuisance-Call&SMS Blocker published at the 'play' market has multiple vulnerabilities...

SMS Blocker. Clean Inbox - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Blocker. Clean Inbox published at the 'play' market has multiple vulnerabilities...

Calls Blacklist - Call Blocker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Calls Blacklist - Call Blocker published at the 'play' market has multiple vulnerabilities...

Call Blocker Free - Blacklist - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Call Blocker Free - Blacklist published at the 'play' market has multiple vulnerabilities...

Call Blocker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Call Blocker published at the 'play' market has multiple vulnerabilities...

Remotely Exploitable Bug in Truecaller Puts Over 100 Million Users at Risk

Security researchers have discovered a remotely exploitable vulnerability in Called ID app "Truecaller" that could expose personal details of Millions of its users. Truecaller is a popular service that claims to "search and identify any phone number," as well as helps users block incoming calls o...

Microsoft Deploys Macro-Blocker in Office to Curb Malware

If it ain’t broke, don’t fix it. If there’s one thing the recent surge in threats using macros to spread malware has shown, it’s that the vector is clearly working for attackers. Developers at Microsoft hope a feature in the latest version of Microsoft Office will reduce the frequency of those...

Apple Kicks Out some Malicious Ad-Blocker Apps from its Online Store

Apple has removed several apps from its official iOS App Store that have the ability to compromise encrypted connections between the servers and the end-users. Apple has officially said: We have removed a "few" apps from the iOS App Store that could install root certificates and allow monitoring...

Apple Removes Apps That Expose Encrypted Traffic

Apple has purged its App Store of a number of apps that expose encrypted traffic via the installation of root certificates. Apple has declined to name the apps. “Apple has removed a few apps from the App Store that install root certificates that could allow monitoring of data,” Apple said today i...

Feed protocol with POST bypasses mixed content protections — Mozilla

Security researcher Masato Kinugawa reported that opening a target page using a POST to the url prefixed with the feed: protocol disables the mixed content blocker for that page. This could allow for the risk of a man-in-the-middle MITM scripting attack on pages that accidentally include insecure...

Symantec Norton Antivirus 2001/2002/2003/2004 Script Blocker Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script Blocker bypass. The privileges and zone required...

history.go() DoS on multiple browsers

No description provided by source. -- Camino 2.0.2 history.go DoS Found By: DrIDE Tested On: Camino 2.0.2 on OSX 10.6.3 Notes: Impact is reduced because user must either have popup blocker off, or accept popups. Tested On: Safari 4.0.5 on OSX 10.6.3 Notes: Impact is reduced because user must eith...