CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...

WordPress CP Polls Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress CP Polls Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

GNU gcc Integer Overflow Vulnerability

GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. An integer overflow vulnerability exists in GNU gcc, which stems from inconsistent use of the long and int types for string/array lengths in the cp-demangle.c file. An attacker can...

WordPress CP Polls 1.0.8 File Upload / Cross Site Scripting

Exploit Title: WordPress CP Polls 1.0.8 - Cross-site file upload & persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI: http://wordpress.dwbooster.com/forms/cp-polls Version: 1.0.8...

CP Polls <= 1.0.8 - Multiple CSRF Vulnerabilities

The Polls CP WordPress plugin was affected by a Multiple CSRF Vulnerabilities security vulnerability...

CP Polls <= 1.0.8 - Multiple XSS Vulnerabilities

The Polls CP WordPress plugin was affected by a Multiple XSS Vulnerabilities security vulnerability...

WordPress CP Polls 1.0.8 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI: http://wordpress.dwbooster.com/forms/cp-polls Version: 1.0.8...

WordPress CP Polls Plugin 1.0.8 - Multiple Vulnerabilities

There are some multiple vulnerabilities in this plugin, such as XSS, CSRF and file download issue. Because of these vulnerabilities, an attacker can inject malicious payload into a votation, inject malicious HTML or JavaScript codes or attack an administrator. Solution Update the plugin...

WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities

WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...

WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities

Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI: http://wordpress.dwbooster.com/forms/cp-polls Version: 1.0.8...

WordPress CP Polls 1.0.8 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress CP Polls 1.0.8 - CSRF - Update poll settings & Persistent XSS Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/cp-polls/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...

Code injection

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

CVE-2015-8214

CVE-2015-8214 affects Siemens SIMATIC CP modules (CP 342-5, CP 343-1 variants, CP 443-1 variants, TIM 3V-IE/4R-IE, including SIPLUS) across many versions. Root cause: the access protection layer could allow unauthenticated users to perform administrative operations if network access to port 102/T...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

PT-2015-7745

Name of the Vulnerable Software and Affected Versions SIMATIC NET CP 342-5 versions prior to not specified SIMATIC NET CP 343-1 Advanced versions prior to V3.0.44 SIMATIC NET CP 343-1 Lean versions prior to V3.1.1 SIMATIC NET CP 343-1 Standard versions prior to V3.1.1 SIMATIC NET CP 443-1 Advance...

CVE-2015-8214: Undefined Security Weakness

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

PT-2017-17625

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.2 through 4.9.3 Description The issue is related to the cp report fixup function in the Linux kernel, which can be exploited by physically proximate attackers to cause a denial of service due to an integer underflow. It...

CVE-2015-7235

Multiple SQL injection vulnerabilities in dexreservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a dexreservationscalendarload2 action or 2 dexitem parameter in a...

Sql injection

Multiple SQL injection vulnerabilities in dexreservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a dexreservationscalendarload2 action or 2 dexitem parameter in a...

CVE-2015-7235

CVE-2015-7235 affects the WordPress plugin CP Reservation Calendar (dex_reservations.php) prior to version 1.1.7. The flaw enables SQL injection via two vectors: (1) id parameter in a dex_reservations_calendar_load2 action, and (2) dex_item parameter in a dex_reservations_check_posted_data action...