WordPress DingTalk LTS 4.6 Open Redirection

Exploit Title : WordPress DingTalk Themes LTS 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/05/2019 Vendor Homepage : zmingcx.com - dingfen.net Information Link : zmingcx.com/begin.html WordPress Version : 5.2.1 Theme Version : LTS 4.6...

WordPress 4DMayi 4.6 Open Redirection

Exploit Title : WordPress 4DMayi Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/05/2019 Vendor Homepage : zmingcx.com Information Link : zmingcx.com/begin.html WordPress Version : 4.9.10 Theme Version : 4.6 Category : WebApps...

WordPress LaneMotorSport Responsive 1.8.4 Open Redirection

Exploit Title : WordPress LaneMotorSport Responsive Themes 1.8.4 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/05/2019 Vendor Homepage : 1853digital.com - lanemotorsport.com - fclane.com Information Link : cyberchimps.com/responsive-theme/ ...

WordPress lqcPlugin-regiePublicites 1.0 Open Redirection

Exploit Title : WordPress lqcPlugin-regiePublicites Plugins 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/05/2019 Vendor Homepage : wordpress.com WordPress Affected Version : 4.6.14 Plugin Version : 1.0 Tested On : Windows and Linux...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Heap overflow

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7095

Adobe Digital Editions is affected by CVE-2019-7095, a heap overflow in versions 4.5.10.185749 and earlier. The vulnerability could allow arbitrary code execution on exploitation. Remediation: update to 4.5.10.186048 (per THN ThreatPost and Red Hat/NVD references). The linked reports confirm the ...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

LinkedIn Faux Pas Shines Light on Certificate Management

Visibility and control of digital certificates remains a challenge for even the largest enterprises, as evidenced by a high profile incident this week affecting Microsoft’s LinkedIn. Users accessing LinkedIn on Tuesday got a warning from their browsers alerting them about an insecure connection...

PT-2019-18425

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.10.185749 and below Description The issue is related to a heap overflow, which could potentially lead to arbitrary code execution if successfully exploited. Recommendations For Adobe Digital Editions version...

CVE-2019-7095: Out-of-bounds Write

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

Command injection

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

CVE-2019-9949

The CVE-2019-9949 entry affects Western Digital My Cloud devices (Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100, PR4100) prior to firmware 2.31.183. The vulnerability arises from the CGI tool cgi-bin/webfile_mgr.cgi, which allows arbitrary file writes by abusing symlinks via a ta...

WordPress Xunjin 4.6 Open Redirection

Exploit Title : WordPress Xunjin Themes 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : xunjinwang.com Theme Affected Version : 4.6 WordPress Affected Version : 4.9.10 Information Link :...

WordPress Howsci 1.8 Open Redirection

Exploit Title : WordPress Howsci Themes 1.8 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : howsci.com Theme Affected Version : 1.8 WordPress Affected Version : 4.9.10 Information Link : howsci.com/tag/themes/ Tested...

WordPress jilijilibegin LTS 4.6 Open Redirection

Exploit Title : WordPress jilijilibegin Themes LTS 4.6 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : zmingcx.com Theme Affected Version : LTS and 4.6 WordPress Affected Version : 5.1.1 Information Link :...