EUVD-2017-11172

Malware in sbrugna...

EUVD-2017-9650

Malware in sbrugna...

CVE-2017-20176

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176 ciubotaru share-on-diaspora new_window.php cross site scripting

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176 ciubotaru share-on-diaspora new_window.php cross site scripting

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file newwindow.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is...

CVE-2017-20176

CVE-2017-20176 affects ciubotaru share-on-diaspora v0.7.9. A cross-site scripting vulnerability exists in the file new_window.php caused by manipulation of the title and/or url parameters. The vulnerability can be triggered remotely. A patch identified as fb6fae2f8a9b146471450b5b0281046a17d1ac8dd...

WordPress plugin share-on-diaspora 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2023-10627 · Ciubotaru · Share-On-Diaspora

Name of the Vulnerable Software and Affected Versions: ciubotaru share-on-diaspora version 0.7.9 Description: A vulnerability was found in the file new window.php, where the manipulation of the title or url argument leads to cross-site scripting. The attack can be initiated remotely...

Browser Bugs Exploited to Install 2 New Backdoors on Targeted Computers

Cybersecurity researchers have disclosed details about a new watering hole attack targeting the Korean diaspora that exploits vulnerabilities in web browsers such as Google Chrome and Internet Explorer to deploy malware for espionage purposes. Dubbed "Operation Earth Kitsune" by Trend Micro, the...

WordPress share-on-diaspora plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. share-on-diaspora is a plugin that adds share buttons to it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2017-18534

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...

CVE-2017-18534

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...

Cross site scripting

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...

CVE-2017-18534

The CVE-2017-18534 entry concerns the WordPress plugin “share-on-diaspora” prior to version 0.7.2, which is affected by a reflected XSS in share URL parameters. Multiple connected sources (e.g., CVE records and vendor/tier aggregations) confirm the component (Share On Diaspora WordPress plugin) a...

Share On Diaspora < 0.7.2 - XSS

The Share on Diaspora WordPress plugin was affected by a XSS security vulnerability...

elektrollart.de XSS vulnerability

Vulnerable URL: http://www.elektrollart.de/wp-content/plugins/share-on-diaspora/newwindow.php?url=!%22%3E%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress Share-On-Diaspora Cross Site Scripting

Title: WordPress share-on-diaspora Plugin Cross Site Scripting XSS + Date: 2017/08/17 + Author: APA Golestan - GuCert + Vendor Homepage: www.WordPress.org + Tested on: Windows 10 & Kali Linux + Vulnerable File: /newwindow.php + Dorks :...

Diaspora Native WebApp - External URLs, WebView JavaScript enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Diaspora Native WebApp published at the 'play' market has multiple vulnerabilities...