PT-2019-14056

Name of the Vulnerable Software and Affected Versions import-users-from-csv-with-meta plugin versions prior to 1.14.1.3 Description The issue concerns a problem where imported data can lead to XSS. Recommendations For versions prior to 1.14.1.3, update to version 1.14.1.3 or later to resolve the...

PT-2019-14057

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a Cross-Site Scripting XSS problem. Recommendations For versions prior to 1.14.0.3, update to version 1.14.0.3 or later to resolve the...

PT-2019-14058

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a CSRF problem in the import-users-from-csv-with-meta plugin for WordPress. Recommendations For versions prior to 1.14.0.3, update the...

PT-2019-13982

Name of the Vulnerable Software and Affected Versions webtoffee WordPress Users & WooCommerce Customers Import Export plugin version 1.3.0 Description The issue allows CSV injection in the user url, display name, first name, and last name columns in an exported CSV file created by the WF...

PT-2019-14055

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.2.1 Description The issue allows for directory traversal. Recommendations For versions prior to 1.14.2.1, update to version 1.14.2.1 or later to resolve the issue...

CVE-2019-15326: Improper Limitation of a Pathname to a Restricted Directory

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

CVE-2019-15328: Improper Neutralization of Input During Web Page Generation

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

CVE-2019-15329: Cross-Site Request Forgery (CSRF)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

CVE-2019-15127

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...

Cross site scripting

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...

CVE-2019-15127

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...

CVE-2019-15127

CVE-2019-15127 affects REDCap prior to 9.3.0. The issue is an XSS vulnerability on the Data Import Tool page, exploitable by a CSV data import file and affecting non-administrator accounts. The description in public records does not specify the underlying root cause or CVE exploit vectors beyond ...

PT-2019-14000

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 9.3.0 Description The issue allows for XSS attacks against non-administrator accounts on the Data Import Tool page. This is achieved via a CSV data import file. Recommendations For versions prior to 9.3.0, update to...

CVE-2019-15127: Improper Neutralization of Input During Web Page Generation

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file...

PEpper - An Open Source Script To Perform Malware Static Analysis On Portable Executable

An open source tool to perform malware static analysis on P ortable E xecutable Installation eva@paradise:$ git clone https://github.com/Th3Hurrican3/PEpper/ eva@paradise:$ cd PEpper eva@paradise:$ pip3 install -r requirements.txt eva@paradise:$ python3 pepper.py ./malwaredir Screenshot...

August 17, 2019—KB4512512 (Preview of Monthly Rollup)

None None...

August 17, 2019—KB4512478 (Preview of Monthly Rollup)

None None...

WordPress wp-ultimate-csv-importer plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site request forgery vulnerabili...

CVE-2019-14800

The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI...

Format string

The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the wp-admin/admin-post.php?page=fvplayer&fv-email-export=1 URI...