Cross site request forgery (csrf)

The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php...

CVE-2019-17386

The CVE-2019-17386 entry documents a CSRF vulnerability in the WordPress plugin Animate It! (before version 2.3.6), specifically in the edsanimate.php file. The issue allows unauthorized cross-site requests to be made from an affected client, as described in multiple sources. Connected documents ...

CVE-2019-17386

The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php...

Planting Tiny Spy Chips in Hardware Can Cost as Little as $200

A new proof-of-concept hardware implant shows how easy it may be to hide malicious chips inside IT equipment...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

CVE-2019-13929

CVE-2019-13929 affects Siemens SIMATIC IT UADM (pre-1.3). A authenticated remote attacker with network access to port 1434/tcp could recover a password enabling read/write access to the related TeamCenter station, without user interaction. The root cause is use of a hard-coded cryptographic key. ...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

CVE-2019-17385

The animate-it plugin before 2.3.5 for WordPress has XSS...

CVE-2019-17384

The animate-it plugin before 2.3.4 for WordPress has XSS...

CVE-2019-17384

The animate-it plugin before 2.3.4 for WordPress has XSS...

CVE-2019-17385

The animate-it plugin before 2.3.5 for WordPress has XSS...

CVE-2019-17385

The animate-it plugin before 2.3.5 for WordPress has XSS...

CVE-2019-17385

CVE-2019-17385 affects the WordPress plugin animate-it (pre-2.3.5; some sources indicate pre-2.3.6) where a cross-site scripting (XSS) vulnerability exists due to improper validation of client-side data. This vulnerability is in the plugin used to add CSS3 animations. Impact is client-side code e...

CVE-2019-17384

CVE-2019-17384 concerns the WordPress plugin “animate-it” (older than 2.3.4), vulnerable to cross-site scripting (XSS). The affected component is the animate-it plugin’s client-side data handling in WordPress plugins prior to version 2.3.4; the root cause is lack of input validation/escaping in t...

Intimate Details on Healthcare Workers Exposed as Cloud Security Lags

Yet another non-password protected cloud database has come to light, this time exposing a raft of highly personal information on healthcare workers and traveling nurses – including drug tests and arrest records. The incident showcases the unfortunate reality that cloud data security remains a...

pdp2007.it Cross Site Scripting vulnerability

Security Researcher Gh05tPT Helped patch 6846 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting pdp2007.it website and its users. Following coordinated...

ICSA-19-281-04 Siemens SIMATIC IT UADM

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC IT Unified Architecture Discrete Manufacturing UADM Vulnerability: Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of this vulnerability...