The CIS Critical Security Controls Series

What are the CIS Critical Security Controls? The Center for Internet Security CIS Top 20 Critical Security Controls previously known as the SANS Top 20 Critical Security Controls, is an industry-leading way to answer your key security question: "How can I be prepared to stop known attacks?" The...

Easy Team Manager 1.3.2 - Authenticated Blind SQL Injection

The easy-team-manager WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

[SECURITY] Fedora 24 Update: sane-backends-1.0.25-7.fc24

Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware flatbed scanner, hand-held scanner, video and still cameras, frame-grabbers, etc...

Adobe Reader Recipe

Adobe Reader is used to open and read PDF’s. It is distributed by Adobe. It is easy to install into an application layer...

[SECURITY] Fedora 24 Update: qemu-2.6.2-8.fc24

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

CVE-2017-8367

Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner,...

CVE-2017-8367

The CVE-2017-8367 entry covers a local buffer overflow in Ether Software Easy MOV Converter and related burn/converter tools (e.g., Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, etc.). The root cause is a buffer overflow triggered by a long username, enabling a lo...

Easy File Uploader - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link:...

Easy File Uploader - Arbitrary File Upload

Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Tested on: GNU/Linux GREETZ: Rodrigo...

WordPress Easy WP SMTP Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. A cross-site scripting vulnerability exists in WordPress Easy WP SMTP...

CVE-2017-7723

XSS exists in Easy WP SMTP before 1.2.5, a WordPress Plugin, via the e-mail subject or body...

CVE-2017-7723

XSS exists in Easy WP SMTP before 1.2.5, a WordPress Plugin, via the e-mail subject or body...

Cross site scripting

XSS exists in Easy WP SMTP before 1.2.5, a WordPress Plugin, via the e-mail subject or body...

CVE-2017-7723

XSS exists in Easy WP SMTP before 1.2.5, a WordPress Plugin, via the e-mail subject or body...

CVE-2017-7723

The CVE-2017-7723 entry concerns the WordPress plugin Easy WP SMTP, where a cross-site scripting (XSS) flaw exists in versions prior to 1.2.5. The vulnerability allows injection and execution of arbitrary scripts via the e-mail subject or body, as described across multiple sources (including NVD/...

Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC Date : 12/03/2017 Exploit Author : Muhann4d Vendor Homepage : http://www.divxtodvd.net/ Software Link : http://www.divxtodvd.net/easymovconverter.exe...

OpenKeychain: Easy PGP - Customized SSL, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application OpenKeychain: Easy PGP published at the 'play' market has multiple vulnerabilities...

Easy WP Smtp < 1.2.5 - XSS

The Easy WP SMTP WordPress plugin was affected by a XSS security vulnerability...

Easy File Sharing FTP Server 3.6 Directory Traversal Exploit

This module exploits a directory traversal vulnerability found in Easy File Sharing FTP Server Version 3.6 and Earlier. This vulnerability allows an attacker to download arbitrary files from the server by crafting a RETR command that includes file system traversal strings such as '../' Usage Info...

WordPress Easy Digital Downloads plugin <= 2.7.11 - Information Disclosure Vulnerability

WordPress Easy Digital Downloads plugin in 2.7.11 and earlier versions are vulnerable to information disclosure vulnerability. The plugin function eddajaxgetdownloadtitle is accessible to anyone logged in or logged out users. Solution Update the plugin...