WordPress Ad-Manager 1.1.2 Open Redirection

Exploit Title : WordPress Ad-Manager Plugins 1.1.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : wordpress.org Software Information Link : wordpress.org/plugins/ad-manager-wd/ Software Affected Versions : Plugin...

WordPress Antena_Ri Institute 2.0 Open Redirection

Exploit Title : WordPress AntenaRi Institute Themes 2.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : k-institute.jp - ttbbsky.net Theme Affected Versions : 1.0 and 2.0 WordPress Affected Versions : 4.7.13 - 4.8.9 ...

WordPress Chrome-Extensions 1.0 Open Redirection

Exploit Title : WordPress Chrome-Extensions Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : chrome-extensions.org - cssjockey.com Information Link : themesinfo.com/chrome-extensions-wordpress-theme-wwpx...

PT-2019-19953

Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 versions prior to 2.31.183 Description The issue allows for code execution as root, starting from a low-privilege user session. This occu...

WordPress Tigin 1.0.5 Open Redirection

Exploit Title : WordPress Tigin Themes 1.0.5 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/05/2019 Vendor Homepage : tiginstitute.com - gilgalmediaarts.com Theme Affected Version : 1.0.5 WordPress Affected Version : 4.8.9 Information Link :...

Code Execution Vulnerability in Multiple Western Digital Products

Western Digital My Cloud Mirror Gen2 is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2100 is a personal cloud storage device.Western Digital My...

CVE-2019-9949: Improper Link Resolution Before File Access

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

WordPress Inkblot Theme 4.9.10 Cross Site Request Forgery

Exploit Title : WordPress Inkblot Themes 4.9.10 Cross Site Request Forgery Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 22/05/2019 Vendor Homepage : wordpress.org - gravityforms.com Software Download Link : github.com/mgsisk/inkblot/archive/master.zip Softwar...

Mozilla Tackles Two Critical Flaws with Firefox 67 Release

Mozilla patched several critical vulnerabilities with the release of its Firefox 67 browser on Tuesday. The worst of the bugs patched are two memory safety flaws that could allow attackers to exploit the vulnerabilities to take control of an affected system, according to a security bulletin issue...

Beers with Talos Ep. #53: Shiny happy election security (and ninjas)

Beers with Talos BWT Podcast Ep. 53 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded May 10, 2019 — Election security has been a dominant headline for some time, so it’s high time we take a look at what th...

Slims CMS Akasia 8.3.1 SQL Injection

Exploit Title : Slims CMS Akasia 8.3.1 Improper Authorization Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/05/2019 Vendor Homepage : slimsetd.id - slims.web.id Software Download Link : slims.web.id/goslims/?wpdmpro=slims-8-3-1-akasia Software...

Logic Flaw Vulnerability in Lechi Cloud Digital Campus System

Lechi Cloud Digital Campus System is a public education cloud SAAS solution. A logic flaw vulnerability exists in the Lechi Cloud Digital Campus System. An attacker can exploit this vulnerability to obtain sensitive information...

Huawei routers Digital Signature

The vulnerability of Huawei routers is related to errors in checking digital signatures. Exploiting this vulnerability could allow a local attacker to install malicious software on devices...

CVE-2019-1812

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...

CVE-2019-1813

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...

CVE-2019-1809

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...

CVE-2019-1809

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...

Design/Logic Flaw

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not...

Design/Logic Flaw

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...

Input validation

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signature...