20 matches found
mediator
Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...
WordPress MalCare WordPress Security plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin MalCare Security versions 5.16-6.62...
WordPress BlogVault Backup & Staging plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin BlogVault versions 5.16-6.62...
WordPress The WP Remote WordPress plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability
Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin The WP Remote WordPress Plugin versions 5.16-6.62...
CVE-2026-19718
The BlogVault Backup & Staging , MalCare WordPress Security , and The WP Remote WordPress plugins (all versions before 6.65 ) are vulnerable to an unauthenticated site takeover. The root cause is a weak pseudo-random number generator used to create the secret that binds a site to its remote manag...
Palo Alto Networks PAN-OS 安全漏洞
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which stems from a MACsec protocol implementation issue that could result in the connection association key being expos...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-8934: Unchecked Return Value
The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 1.8.0 This is due to the lack of capability checks on the adminenqueuescripts action which displays the connection key. This makes it possible for authenticated attacker...
VulnCheck KEV: CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2021-24164 Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connecti...
Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
Low-level users, such as subscribers, were able to trigger the action, wpajaxnfoauth, and retrieve the connection url needed to establish a connection. They could also retrieve the clientid for an already established OAuth connection. Usage: php poc.php subscriber password $wpuser, 'pwd' = $wppas...
WordPress Ninja Forms Contact Form plugin <= 3.4.33 - Authenticated OAuth Connection Key Disclosure vulnerability
Authenticated OAuth Connection Key Disclosure vulnerability found by Chloe Chamberland in WordPress Ninja Forms Contact Form plugin versions = 3.4.33. Solution Update the WordPress Ninja Forms Contact Form plugin to the latest available version at least 3.4.34...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
Design/Logic Flaw
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...
CVE-2020-9043
The wpCentral plugin for WordPress, versions before 1.5.1 , is vulnerable to an improper access control flaw that allows for the disclosure of the connection key . An attacker exploiting this vulnerability could access the WordPress Admin account connection key, potentially leading to the retriev...