CVE-2017-18518

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...

Cross site scripting

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...

Cross site scripting

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18530

CVE-2017-18530 covers the WordPress rating-bws plugin prior to version 0.2, which contains multiple cross-site scripting (XSS) flaws. The core issue is insufficient validation of client-side data, enabling an attacker to execute arbitrary JavaScript in victims’ browsers (potentially stealing sess...

CVE-2017-18530

The rating-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

Cross site scripting

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18518

The CVE-2017-18518 entry concerns the WordPress plugin bws-smtp (BestWebSoft) before version 1.1.0 , which has multiple XSS vulnerabilities. The connected nuclei template confirms the vulnerability is a cross-site scripting issue affecting that plugin. The impact stated in the connected document ...

CVE-2017-18518

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...

CVE-2017-18517

CVE-2017-18517 affects the WordPress plugin bws-pinterest prior to version 1.0.5 from the vendor BestWebSoft. The connected document set describes multiple Cross-Site Scripting (XSS) issues in this plugin, enabling an attacker to execute arbitrary JavaScript in victims’ browsers. The Nuclei templ...

CVE-2017-18517

The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues...

CVE-2017-18501

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18501

The CVE-2017-18501 entry concerns the WordPress plugin Social Login by BestWebSoft (social-login-bws) before version 0.2, which contains multiple XSS flaws. The Nuclei template and related references describe cross-site scripting flaws in this plugin, enabling an attacker with authenticated acces...

BWS Systems HA-Bridge Remote Detection

Detection of BWS Systems HA-Bridge. The script sends a HTTP connection request to the remote host and attempts to detect if the remote host is BWS Systems HA-Bridge. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

BWS Systems HA-Bridge Device Information Disclosure Vulnerability

BWS Systems HA-Bridge devices are a product for automating the connection and control of IoT devices. A security vulnerability exists in the BWS Systems HA-Bridge devices. A remote attacker could exploit this vulnerability by sending a direct request to the ! /system URI to obtain sensitive...

CVE-2018-12923

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

Information disclosure

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...

CVE-2018-12923

CVE-2018-12923 : The BWS Systems HA-Bridge devices are vulnerable to an information-disclosure issue where a remote attacker can obtain sensitive information by issuing a direct request to the #!/system URI. The available documents identify this as a vulnerability in the HA-Bridge, describing the...

CVE-2018-12923

BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the !/system URI...