Oleggo Livestream <= 0.2.6 - XSS

Plugin is still affected and has been closed...

Easy Career Opening <= 0.4 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

Malware Finder <= 1.1 - Cross-Site Scripting (XSS)

Plugin is still affected and has been closed...

Conversador <= 2.61 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

Keyword Strategy Internal Links <= 2.0 - XSS

Plugin is still affected and has been closed...

WP Easybooking <= 1.0.3 - XSS

Plugin is still affected and has been closed...

Game Tabs <= 0.4.0 - XSS

Plugin is still affected and has been closed...

Flash Photo Gallery <= 0.7 - XSS

Plugin is still affected and has been closed...

Snapapp <= 1.5 - Multiple Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

Ooorl <= 1.0.0 - XSS

Plugin is still affected and has been closed...

Movies <= 0.6 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/movies/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&...

Votecount For Balatarin <= 0.1.1 - XSS

Plugin is still affected and has been closed...

The HeartBleed vulnerability: the bloody appearance is a peaceful-vulnerability warning-the black bar safety net

The recent Heart bleed vulnerability on the Internet set off a Xuan however huge wave, as the basis for security software major loopholes, far-reaching, the major Internet company, party A and party B, white hat and even CCTV and other media all act together against the common enemy, the race to...

Government launched 'China Operating System' (COS) to break Andoird and iOS Monopoly

China has always tried to support its homegrown tech industry and even the security concerns over U.S. secret surveillance which gives Chinese Government another reasons to trust domestic vendors.Many other countries are also in favor to develop their own technology industries to reduce their...

DEBIAN-CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...

UBUNTU-CVE-2011-5268

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service file descriptor consumption and crash via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 becaus...

Protection Against Port Scanners: Portspoof

The portspoof program is designed to enhance OS security through emulation of legitimate service signatures on otherwise closed ports. It is meant to be a lightweight, fast, portable and secure addition to the any firewall system or security infrastructure. The general goal of the program is to...

Bug Bounty to Reward Researchers with Redeemable Points

IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...

SAPRouter Port Scanner

This module allows for mapping ACLs and identify open/closed ports accessible on hosts through a saprouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAPRouter Port Scanner', 'Description...

Ubuntu 7.10 : firefox-3.0 vulnerabilities (USN-717-2)

A flaw was discovered in the browser engine when restoring closed tabs. If a user were tricked into restoring a tab to a malicious website with form input controls, an attacker could steal local files on the user's system. CVE-2009-0355 Wladimir Palant discovered that Firefox did not restrict...