248 matches found
BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities
The BulletProof Security WordPress plugin was affected by a Multiple XSS Vulnerabilities security vulnerability...
WordPress Bulletproof Security Plugin <= .53.2 - Multiple XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress BulletProof Security Plugin <= .53.3 - Multiple XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Bulletproof Security <= .53.2 - Multiple Cross Site Scripting Vulnerabilities
The BulletProof Security WordPress plugin was affected by a Multiple Cross Site Scripting Vulnerabilities security vulnerability...
WordPress Bulletproof 0.53.2 Cross Site Scripting
Product: Bulletproof SecurityExploit Author: Sachin WaghAffected Version: 0.53.2 Fixed Version: 0.53.3 http://forum.ait-pro.com/forums/topic/bps-changelog/ Home page Link: https://wordpress.org/plugins/bulletproof-security/ Detail: The Bulletproof Security plugin for WordPress is prone to a...
BulletProof Security .52.4 Cross Site Scripting
Details ================ Title : XSS Vulnerability in BulletProof Security Version .52.4 Affected Product : BulletProof Security Version .52.4 Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type : Cross Site Scripting Risk : High POC URL :...
Angler Exploit Kit Spreading Cryptowall 4.0
As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...
WordPress BulletProof Security Plugin <= .52.4 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress BulletProof Security Plugin <= .50.8 - Script Insertion
This plugin is prone to script insertion vulnerability. Solution Update the plugin...
BulletProof Security <= .52.4 - Authenticated Cross-Site Scripting (XSS)
The BulletProof Security WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)
BulletProof FTP Client 2010 - Local Buffer Overflow DEP Bypass ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Feb 15 2015 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version...
BulletProof FTP Client - BPS Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'BulletProof FTP Client BPS Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in...
BulletProof FTP Client 2010 Buffer Overflow
!/usr/bin/env ruby Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Exploit Date: Dec 03 2014 Vulnerability Discovery: Gabor Seljan Exploit Author: Muhamad Fadzil Ramli Software Link: http://www.bpftp.com/ Version: 2010.75.0.76 Tested on: Microsoft Windows XP SP3 EN Version 5.1.26...
BulletProof FTP Client 2010 - Local Buffer Overflow (SEH) (Ruby)
BulletProof FTP Client 2010 - Local Buffer Overflow SEH Ruby !/usr/bin/env ruby Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Exploit Date: Dec 03 2014 Vulnerability Discovery: Gabor Seljan Exploit Author: Muhamad Fadzil Ramli Software Link: http://www.bpftp.com/ Version:...
CVE-2014-8749
Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...
CVE-2014-8749
Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...
PT-2014-8708
Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .51.1 Description A server-side request forgery SSRF issue allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter in the...
Wordpress bulletproof-security <=.51 multiple vulnerabilities
Vulnerability title: Wordpress bulletproof-security =.51 multiple vulnerabilities Author: Pietro Oliva CVE: CVE-2014-7958, CVE-2014-7959, CVE-2014-8749 Vendor: AITpro Product: bulletproof-security Affected version: bulletproof-security = .51 Vulnerabilities fixed in version: .51.1 Details: xss...
CVE-2014-8749: Undefined Security Weakness
Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...
CVE-2014-7958
Cross-site scripting XSS vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter...