5221 matches found
Open redirect
The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...
CVE-2018-17074
The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...
CVE-2018-17074
The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter...
CVE-2018-17074
The CVE-2018-17074 entry concerns the WordPress Feed Statistics plugin prior to version 4.0, which contains an Open Redirect vulnerability via the feed-stats-url parameter. The issue allows attackers to redirect users to arbitrary URLs, potentially aiding phishing or credential theft in contexts ...
CVE-2018-14847
creationtimestamp| type| source ---|---|--- 2018-09-04 08:51:50+00:00| seen| MISP/5b8e46ef-a8b4-4059-8c5c-4cc0950d210f 2018-09-04 16:19:46+00:00| exploited| https://t.me/SecLabNews/3063 2018-09-05 10:41:49+00:00| exploited| https://t.me/mtikpro/98 2018-09-05 16:12:57+00:00| exploited|...
Comparison of Open Source Adversary Emulation Tools
PenTestIT RSS Feed If you liked my older post titled "List of Adversary Emulation Tools", I am sure you must want to know what is the difference or comparison between the different tools. This post is an attempt to do just that -to list down the comparison of open source adversary emulation tools...
CVE-2018-15596
An issue was discovered in inc/classfeedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles within title elements of the generated XML documents aren't sanitized, leading to...
CVE-2018-15596
An issue was discovered in inc/classfeedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can generate a URL such as http://localhost/syndication.php?fid=&type=atom1.0&limit=15. The thread titles within title elements of the generated XML documents aren't sanitized, leading to...
Unspecified Vulnerability in Eclipse Vert.x (CNVD-2019-43402)
Eclipse Vert.x is an Eclipse Foundation toolkit for building responsive applications on the JVM , which is mainly used to build applications such as network utilities , Web applications , HTTP/REST microservices and so on. A security vulnerability exists in Eclipse Vert.x that stems from the...
CVE-2018-8298
creationtimestamp| type| source ---|---|--- 2018-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45217 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:28:00+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971350 2025-02-23...
Design/Logic Flaw
pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible to the 'apache' user. This may lead to overwrite of published content on other iso repositories...
Fedora Update for php-zendframework-zend-feed FEDORA-2018-7da5983771
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Linux
Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Drupal Core - 3rd-party libraries -SA-CORE-2018-005
The Drupal project uses the Symfony library. The Symfony library has released a security update that impacts Drupal. Refer to the Symfony security advisory for the issue. The same vulnerability also exists in the Zend Feed and Diactoros libraries included in Drupal core; however, Drupal core does...
feedparser denial of service vulnerability
Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...
GHSA-2P78-8HH6-96XC feedparser Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...
feedparser Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...
GHSA-6H52-4VMH-8X4F feedparser denial of service vulnerability
feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...
feedparser denial of service vulnerability
feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0.1 allows remote attackers to cause a denial of service application crash via a malformed DOCTYPE declaration...
CVE-2014-0130
creationtimestamp| type| source ---|---|--- 2018-06-30 21:50:00+00:00| published-proof-of-concept| https://t.me/cKure/160 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:47:53+00:00| seen| https://t.me/arpsyndicate/1372 2024-12-24 20:28:47+00:00| seen|...