Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)

Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...

Canon PRINT 2.5.5 - Information Disclosure Exploit

Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339 Date: 24th July, 2019 Exploit Author: 0x48piraj Vendor Homepage: https://www.usa.canon.com/internet/portal/us/home/explore/printing-innovations/mobile-printing/canon-print-app Software Link:...

Canon PRINT 2.5.5 - Information Disclosure

Canon PRINT 2.5.5 - Information Disclosure Exploit Title: Content Provider URI Injection on Canon PRINT 2.5.5 CVE-2019-14339 Date: 24th July, 2019 Exploit Author: 0x48piraj Vendor Homepage:...

WordPress shortcode-factory plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. shortcode-factory is a plugin that provides ready-to-use shortcodes. An input validation error vulnerability exists in the WordPress...

WordPress shortcode-factory plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. shortcode-factory is a plugin that provides ready-to-use shortcodes. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-15322

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

Design/Logic Flaw

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2019-15322

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2019-15322

Summary: CVE-2019-15322 affects the WordPress plugin “shortcode-factory” prior to version 2.8, which contains a Local File Inclusion vulnerability. Affected software: WordPress shortcode-factory plugin, versions before 2.8. Impact and risk (as stated): Local File Inclusion could allow an attacker...

PT-2019-14051

Name of the Vulnerable Software and Affected Versions WordPress shortcode-factory plugin versions prior to 2.8 Description The issue is related to Local File Inclusion in the shortcode-factory plugin for WordPress. Recommendations For versions prior to 2.8, update the shortcode-factory plugin to...

CVE-2019-15322: Undefined Security Weakness

The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion...

CVE-2015-9321

The shortcode-factory plugin before 1.1.1 for WordPress has XSS via addqueryarg...

CVE-2015-9321

The CVE-2015-9321 entry applies to the WordPress Shortcode Factory plugin prior to 1.1.1, where an XSS vulnerability is triggered via add_query_arg. The affected component is the shortcode-factory plugin in WordPress; the underlying issue is a cross-site scripting flaw that could enable client-si...

CVE-2015-9321: Improper Neutralization of Input During Web Page Generation

The shortcode-factory plugin before 1.1.1 for WordPress has XSS via addqueryarg...

PT-2019-7280

Name of the Vulnerable Software and Affected Versions shortcode-factory plugin versions prior to 1.1.1 for WordPress Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the add query arg function. Recommendations For versions prior to 1.1.1, update to versi...

CVE-2018-20956

Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...

Design/Logic Flaw

Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20956

Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20956: Insertion of Sensitive Information into Log File

Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...

D-Link DIR-823G Denial of Service Vulnerability

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in /bin/goahead in the D-Link DIR-823G with firmware version 1.02B03. An attacker can exploit this vulnerability to reset the router without authentication, resulting in a denia...