CVE-2020-5530

The CVE-2020-5530 entry describes a cross-site request forgery (CSRF) in the WordPress plugin Easy Property Listings, affecting versions prior to 3.4. The vulnerability allows an attacker to hijack an administrator’s authenticated session via unspecified vectors, enabling unintended actions when ...

CVE-2020-5530

Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery

Overview WordPress Plugin "Easy Property Listings" provided by Merv Barrett contains a cross-site request forgery vulnerability CWE-352. Rei Nakahara of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported this vulnerability to the...

Easy Property Listings < 3.4 - Cross-Site Request Forgery (CSRF)

No details were provided...

JVN#89259622: WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery

WordPress Plugin "Easy Property Listings" provided by Merv Barrett contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the informatio...

Easy Property Listings Cross-Site Request Forgery Vulnerability

Easy Property Listings is a property listings plugin. A cross-site request forgery vulnerability exists in versions prior to Easy Property Listings 3.4. The vulnerability stems from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could...

Easy Chat Server 3.1 Unquoted Service Path

Exploit Title: Easy Chat Server v3.1 - 'Easy Chat Service' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: http://www.echatserver.com/ Software Link: http://www.echatserver.com/ecssetup.exe Version: 3.1 Tested On: Windows 10 32-bit Recreate: 1 Download & install Easy...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/python Exploit Title: Easy File Sharing Web Server v7.2 - POST 'Email' Unauthenticated Remote Buffer Overflow Exploit Author: boku aka Bobby Cooke Date: February 7th, 2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2...

Easy File Sharing Web Server 7.2 Unquoted Service Path

Exploit Title: Easy File Sharing Web Server v7.2 - 'Easy File Sharing Web Service' Unquoted Service Path Exploit Author: boku Date: 02/10/2020 Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2 Tested On: Windows 10 32-bit Recreate: ...

CVE-2020-8945

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification...

Bumble: On Singing up with a Phone number , The 4 digit OTP does not expires for a long time leading to an easy attack and make a verified account easilty

Hello there how are you doing ? Go to sign up page and enter a new phone number and you will be redirected to https://bumble.com/registration/confirm-phone . You will receive a easy breakable 4 digit OTP Code . I waited for about 4 hours and the OTP did not expired , This shows that the OTP can b...

PNG Silent Arbitrary Code Execution FUD Exploit

0day PNG Exploit. All Chrome, Edge, Opera, Firefox, Microsoft Internet Explorer, Yandex, tested. Running smoothly Latest version. Windows 7, Windows 8, Windows 8.1, Windows 10 Tested Works in the latest versions. All Mail services were Tested bypass, Gmail, Hotmail, Yahoo, Yandex-mail, Foxmail, Q...

The vulnerability of the XML Parsing component in the Easy XML Editor allows a hacker to cause a service failure in the application or to read arbitrary files from the system.

The vulnerability of the XML Parsing component in the Easy XML Editor is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to cause service failures in the application or enable them to read arbitrary files in the system by running a specially craft...

Cups Easy 1.0 Cross Site Request Forgery

Title: Cups Easy 1.0 - Cross Site Request Forgery Password Reset Date: 2020-01-28 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/u/ajayshar76/profile/ Software Link: https://sourceforge.net/projects/cupseasy/files/cupseasylive-1.0/ Version: 1.0 Tested on Windows 10/Kali...

Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)

Title: Cups Easy 1.0 - Cross Site Request Forgery Password Reset Date: 2020-01-28 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/u/ajayshar76/profile/ Software Link: https://sourceforge.net/projects/cupseasy/files/cupseasylive-1.0/ Version: 1.0 Tested on Windows 10/Kali...

Cups Easy 1.0 - Cross Site Request Forgery (Password Reset) Vulnerability

Exploit for php platform in category web applications Title: Cups Easy 1.0 - Cross Site Request Forgery Password Reset Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/u/ajayshar76/profile/ Software Link: https://sourceforge.net/projects/cupseasy/files/cupseasylive-1.0/ Versio...

CVE-2020-8425

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php...

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

CVE-2020-8425

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php...

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...