Multiple vulnerabilities in FireStats

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Authorization, Information Leakage, Insufficient Anti-automation, Denial of Service и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Insufficient Authorization и Information Leakage:...

Multiple BeaWeblogic bugs

Weak JNDI trees protection, insufficient authorization for few weblogic.Admin methods, weak resource protection thorugh web.xml on case-insensitive filesystems, utilities passwords stored in cleartext, cleartext password leaked during reboot, technical information leak, logon with disabled...