16 matches found
mediator
Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...
WordPress MalCare WordPress Security plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin MalCare Security versions 5.16-6.62...
WordPress BlogVault Backup & Staging plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin BlogVault versions 5.16-6.62...
WordPress The WP Remote WordPress plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin The WP Remote WordPress Plugin versions 5.16-6.62...
CVE-2026-19718
CVE-2026-19718 affects three WordPress plugins — BlogVault Backup & Staging , MalCare WordPress Security , and The WP Remote (versions 5.16–6.62) — where a weak pseudo-random number generator is used to create the connection key secret that binds a site to its remote management service. Unauthent...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which stems from a MACsec protocol implementation issue that could result in the connection association key being expos...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
VulnCheck KEV: CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2021-24164 Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connecti...
Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
Low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connection. Usage: php poc.php subscriber password $wpuser, 'pwd' = $wppas...
WordPress Ninja Forms Contact Form plugin <= 3.4.33 - Authenticated OAuth Connection Key Disclosure vulnerability
Authenticated OAuth Connection Key Disclosure vulnerability found by Chloe Chamberland in WordPress Ninja Forms Contact Form plugin versions = 3.4.33. Solution Update the WordPress Ninja Forms Contact Form plugin to the latest available version at least 3.4.34...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
Design/Logic Flaw
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...