5559 matches found
WordPress Tigin Themes Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Tigin Themes. An attacker can successfully launch a phishing scam and stea...
WordPress jilijilibegin Themes LTS Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress jilijilibegin Themes LTS. An attacker can successfully initiate a phishing...
WordPress PHPL Plugin Open Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open open redirect vulnerability exists in the WordPress PHPL plugin. An attacker can exploit the vulnerability to...
CVE-2019-8352
By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code ...
Detecting credential theft through memory access modelling with Microsoft Defender ATP
Stealing user credentials is a key step for attackers to move laterally across victim networks. In today’s attacks, we see a range of tools used to achieve credential theft, requiring protections that target the root behavior and not just individual known tools as is often done by traditional...
PT-2019-11713 · Jenkins · Jenkins Ansible Tower Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Ansible Tower Plugin versions 0.9.1 and earlier Description: A missing permission check in the TowerInstallation.TowerInstallationDescriptordoTestTowerConnection form validation method allowed attackers with Overall/Read permission to...
P2P Weakness Exposes Millions of IoT Devices
A peer-to-peer P2P communications technology built into millions of security cameras and other consumer electronics includes several critical security flaws that expose the devices to eavesdropping, credential theft and remote compromise, new research has found. A map showing the distribution of...
Scranos: New Rapidly Evolving Rootkit-Enabled Spyware Discovered
A new powerful rootkit-enabled spyware operation has been discovered wherein hackers are distributing multifunctional malware disguised as cracked software or trojanized app posing as legitimate software like video players, drivers and even anti-virus products. While the rootkit malware—dubbed...
CloudBees Jenkins CSRF Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Slack Notification Plugin is used in one of t...
WordPress Plugin WireFunnel Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirection vulnerability exists in the WordPress plugin WireFunnel. An attacker can exploit the vulnerability to...
WordPress Ait-ThemesClub TemplatePreview RFI Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress Ait-ThemesClub TemplatePreview. An attacker can exploit the vulnerability to...
HP Isaac Mizrahi Smartwatch Security Feature Issue Vulnerability
HP Isaac Mizrahi is an application from Hewlett-Packard HP USA for managing access to the HP Isaac Mizrahi smartwatch. A security vulnerability exists in HP Isaac Mizrahi Smartwatch. An attacker could exploit the vulnerability to steal credentials and hijack the user interface...
WordPress Plugin WPBounce AND-AntiBounce Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in the WordPress plugin WPBounce AND-AntiBounce. An attacker can exploit the...
Wordpress begin Themes open redirection vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in Wordpress begin Themes. An attacker can exploit the vulnerability to launch a phishi...
WordPress Plugin The-CL-Amazon-Thingy Open Redirect Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirection vulnerability exists in the WordPress plugin The-CL-Amazon-Thingy. An attacker can exploit the...
WordPress Zangai Themes Open Redirect Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirect vulnerability exists in WordPress Zangai Themes, which can be exploited by attackers to conduct phishing scams and steal user credentials...
WordPress itiis Themes Open Redirect Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress itiis Themes suffers from an open redirection vulnerability that can be exploited by attackers to conduct phishing scams and steal user credentials...
WordPress BigChrome Themes Open Redirect Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress BigChrome Themes has an open redirect vulnerability that can be exploited by attackers to conduct phishing scams and steal user credentials...
WordPress fxPro.Cn Themes Open Redirect Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress fxPro.Cn Themes suffers from an open redirect vulnerability that can be exploited by attackers to conduct phishing scams and steal user credentials...
WordPress 2018110612035976 Themes Open Redirect Vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress 2018110612035976 Themes suffers from an open redirection vulnerability that can be exploited by attackers to conduct phishing scams and steal user...