CVE-2015-9230

In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter...

CVE-2015-9230

The CVE-2015-9230 entry relates to the BulletProof Security WordPress plugin. Affected component: admin/db-backup-security/db-backup-security.php. Root cause: cross-site scripting (XSS) vulnerability via the DBTablePrefix parameter in plugin versions prior to 0.52.5, exploitable by remote authent...

WordPress Bulletproof Security plugin cross-site scripting vulnerability (CNVD-2016-05861)

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.BulletProof Security is one of the security plugins against brute force cracking. Cross-site scripting vulnerability exists in versions of the WordPress Bulletproof Security plugin prior to 0.53.4, which can be...

Wordpress BulletProof Security plugin cross-site scripting vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.BulletProof Security is one of the security plugins against brute force cracking. A cross-site scripting vulnerability exists in version 0.53.2 of the WordPress Bulletproof Security plugin. An attacker can...

BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities

The BulletProof Security WordPress plugin was affected by a Multiple XSS Vulnerabilities security vulnerability...

WordPress BulletProof Security Plugin <= .53.3 - Multiple XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Bulletproof Security Plugin <= .53.2 - Multiple XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Wordpress BulletProof Security 53.3 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple XSS Vulnerabilities in BulletProof Security Affected Software : BulletProof Security Affected Versions: v53.3 and possibly below Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type :...

Bulletproof Security <= .53.2 - Multiple Cross Site Scripting Vulnerabilities

The BulletProof Security WordPress plugin was affected by a Multiple Cross Site Scripting Vulnerabilities security vulnerability...

WordPress Bulletproof 0.53.2 Cross Site Scripting

Product: Bulletproof SecurityExploit Author: Sachin WaghAffected Version: 0.53.2 Fixed Version: 0.53.3 http://forum.ait-pro.com/forums/topic/bps-changelog/ Home page Link: https://wordpress.org/plugins/bulletproof-security/ Detail: The Bulletproof Security plugin for WordPress is prone to a...

BulletProof Security .52.4 Cross Site Scripting

Details ================ Title : XSS Vulnerability in BulletProof Security Version .52.4 Affected Product : BulletProof Security Version .52.4 Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type : Cross Site Scripting Risk : High POC URL :...

Angler Exploit Kit Spreading Cryptowall 4.0

As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...

WordPress BulletProof Security Plugin <= .52.4 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress BulletProof Security Plugin <= .50.8 - Script Insertion

This plugin is prone to script insertion vulnerability. Solution Update the plugin...

BulletProof Security <= .52.4 - Authenticated Cross-Site Scripting (XSS)

The BulletProof Security WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)

BulletProof FTP Client 2010 - Local Buffer Overflow DEP Bypass ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Feb 15 2015 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version...

BulletProof FTP Client - BPS Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'BulletProof FTP Client BPS Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in...

BulletProof FTP Client 2010 Buffer Overflow

!/usr/bin/env ruby Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Exploit Date: Dec 03 2014 Vulnerability Discovery: Gabor Seljan Exploit Author: Muhamad Fadzil Ramli Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Microsoft Windows XP SP3 EN Version 5.1.26...

BulletProof FTP Client 2010 - Local Buffer Overflow (SEH) (Ruby)

BulletProof FTP Client 2010 - Local Buffer Overflow SEH Ruby !/usr/bin/env ruby Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Exploit Date: Dec 03 2014 Vulnerability Discovery: Gabor Seljan Exploit Author: Muhamad Fadzil Ramli Software Link: http://www.bpftp.com/ Version:...

CVE-2014-8749

Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...