CVE-2019-15955

An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If an attacker can discover a session cookie owned by an admin, then it is possible to brute force it with On=2n instead of On=n^x complexity...

CVE-2019-15955

The CVE-2019-15955 entry describes a vulnerability in Total.js CMS 12.0.0 where a low-privilege user can transform an admin session cookie to reveal random values inside it, enabling brute‑forcing to steal the admin password. Sources across NVD/Red Hat/CVE listings confirm the affected product/ve...

One Identity Defender 5.9.3 Insecure Cryptographic Storage

Title: One Identity Defender - Insecure Cryptographic Storage Date: 01 September 2019 Affected Software: ================== One Identity Defender 5.9.3 Other versions are likely also vulnerable. Insecure Cryptographic Storage: ============================== Defender stores token seeds, PAP secret...

Totaljs CMS 12.0 Insecure Admin Session Cookie

Author/Discoverer: Riccardo Krauter @CertimeterGroup + Title: Totaljs CMS Insecure Admin Session cookie + Affected software: Totaljs CMS 12.0 + Description: A low privilege user can easily crack the owned cookie to obtain the “random” values inside it. If this user can leak a session cookie owned...

Magento RSS Feed Brute Force

Magento authenticated RSS Feed has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No...

WordPress sell-downloads plugin information disclosure vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sell-downloads is a paid downloadable site builder plugin used in it. A security vulnerability exists in WordPress sell-downloads plug...

WordPress limit-attempts plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogs on PHP and MySQL servers. limit-attempts is a website security plugin that targets spam and brute-force attacks. A SQL injection vulnerability exists in the WordPres...

CB Partner Spotlight Series: Slipstream Cyber Security

Slipstream Cyber Security is a managed cyber-security service provider enterprise with a Cyber Security Operations Centre CSOC is located in Perth, Western Australia. Staffed by experienced security professionals with backgrounds in cyber operations, anti-fraud, intelligence and more, the team...

GHSA-JP6R-XCJJ-5H7R Cross-Site Scripting in cyberchef

Versions of cyberchef prior to 8.31.3 are vulnerable to Cross-Site Scripting. In Text Encoding Brute Force the table rows are created by concatenating the value variable unsanitized in the HTML code. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript ...

Cross-Site Scripting in cyberchef

Versions of cyberchef prior to 8.31.3 are vulnerable to Cross-Site Scripting. In Text Encoding Brute Force the table rows are created by concatenating the value variable unsanitized in the HTML code. If this variable is controlled by user input it allows attackers to execute arbitrary JavaScript ...

CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

Design/Logic Flaw

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

CVE-2015-9348

CVE-2015-9348 affects the WordPress Sell Downloads plugin prior to version 1.0.8. The vulnerability arises from insufficient restrictions on brute-force guessing of purchase IDs, enabling an attacker to obtain purchase IDs. Multiple connected sources (Red Hat, CNVD, WPVulndb, NVD) corroborate thi...

CVE-2015-9348

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

Cross-Site Scripting (XSS)

cyberchef is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript code into a victim's browser via the text encoding brute force process...

PT-2019-7307

Name of the Vulnerable Software and Affected Versions sell-downloads plugin versions prior to 1.0.8 Description The issue is related to insufficient restrictions on brute-force guessing of purchase IDs. Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later to resolve the...

CVE-2015-9348: Improper Input Validation

The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs...

PT-2019-4020

Name of the Vulnerable Software and Affected Versions Безопасный город affected versions not specified Description The issue is related to insufficient access control mechanisms in the electronic interaction module of the "Безопасный город" hardware and software platform. Exploitation of this iss...

PT-2019-4021

Name of the Vulnerable Software and Affected Versions «Безопасный город» affected versions not specified Description The issue is related to weaknesses in the authorization mechanisms of the electronic interaction module for services and officials of the «Безопасный город» hardware-software...

PT-2020-7498

Name of the Vulnerable Software and Affected Versions: Pwgen version 2.06 Description: The Phonemes mode in Pwgen generates predictable passwords, making it easier for context-dependent attackers to guess the password via a brute-force attack. Recommendations: For Pwgen version 2.06, consider usi...