39 matches found
Hacky Holidays From Rapid7! Announcing Our New Festive Blog Series
The holiday season often inspires reflection on the year coming to a close — but with the new year approaching, this season can also signal the opportunity for a fresh start. In that spirit, we're announcing a refreshed theme and approach to our annual holiday blog series: Hacky Holidays! While...
Phishing Summary 2020—Trends and Highlights
2020 was a challenging year for many of us, as the COVID-19 pandemic disrupted life and introduced challenges in almost all elements of living. 2020 was also challenging from a cybersecurity point of view, as nearly the entire workforce moved...
Beers with Talos Ep. #49: POS Malware, RSA Highlights, and SOL OpSec Fails
Beers with Talos BWT Podcast Ep. 49 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded March 15, 2019. We recorded this after coming back from RSA, with some on-location highlights included. This episode ope...
A week in security (January 28 – February 3)
Last week, we ran another in our interview with a malware hunter series, explained a FaceTime vulnerability, and took a deep dive into a new stealer. We also threw some light on a Houzz data breach, and what exactly happened between Apple and Facebook. Other cybersecurity news Kwik Fit hit by...
Beers with Talos EP 19: The "Best" of BWT
Beers with Talos BWT Podcast Episode 19 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcast EP19 Show Notes: Quotes intended, we think you know why. Mitch takes control to present the best of the...
WordPress post highlights plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . post highlights plugin is one of the text effects plugin . A cross-site scripting vulnerability exists in...
CVE-2014-8087
Cross-site scripting XSS vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/phsave.php...
CVE-2014-8087
CVE-2014-8087 corresponds to a stored XSS in the WordPress Post Highlights plugin (versions before 2.6.1). The vulnerability allows an attacker to inject arbitrary script/HTML via the txt parameter used in a headline action to ajax/ph_save.php. Public records consistently cite the affected compon...
CVE-2014-8087
Cross-site scripting XSS vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/phsave.php...
CVE-2014-8087: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/phsave.php...
sandiego.gov XSS vulnerability
Vulnerable URL: https://www.sandiego.gov/sites/default/files/legacy/coo/2016highlights/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=042437002UjFXxFQ2VsadXjZGy4EHwOwvPBs Details: Description| Value ---|--- Patched:| No Latest...
Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net
! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...
Highlights of Newly Released PCI DSS 3.0 Information
The standards are coming! The PCI SSC has finally let loose with some much needed information regarding the upcoming releases of the PCI DSS 3.0 and PA DSS 3.0 standards. Available on the PCI SSC website; the document titled "Version 3.0 Change Highlights" contains information on what PCI...
WordPress Post Highlights 2.2 SQL Injection
Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress Plugin post highlights 2.2 - SQL Injection
WordPress Plugin post highlights 2.2 - SQL Injection Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress Plugin post highlights 2.2 - SQL Injection
Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...
WordPress post highlights plugin <= 2.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'"; 0day.today 2018-02-27...
HITB Quartal Magazine - eZine Issue 006
Document Title: =============== HITB Quartal Magazine - eZine Issue 006 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/204.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-006.pdf Release Date: ============= 2011-06-16 Vulnerability...
