Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the EndpointRequest.to function that creates a matcher for null/ if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Note: This is only exploitable if all o...

MapProxy 1.11.0 Cross Site Scripting

waraxe-2019-SA110 - Reflected XSS in MapProxy 1.11.0 ================================================================================ Author: Janek Vind "waraxe" Date: 07. August 2019 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-110.html Target description: MapProxy is an open sour...

WordPress Wordfence 7.1.12 XSS / Username Disclosure

waraxe-2018-SA109 - Multiple vulnerabilities in Wordfence Wordpress plugin ================================================================================ Author: Janek Vind "waraxe" Date: 02. October 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-109.html Target description:...

WordPress Breadcrumb NavXT plugin <= 6.1.0 - Username Disclosure via REST API

Username Disclosure via REST API issue found by Janek Vind in WordPress Breadcrumb NavXT plugin versions = 6.1.0. Solution Update the WordPress Breadcrumb NavXT plugin to the latest available version at least 6.2.0...

WordPress FV Flowplayer Video Player plugin <= 7.2.0.727 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Janek Vind "waraxe" in WordPress FV Flowplayer Video Player plugin versions = 7.2.0.727. Solution Update the WordPress FV Flowplayer Video Player plugin to the latest available version at least 7.2.1.727...

WordPress Breadcrumb NavXT 6.1.0 Username Disclosure

waraxe-2018-SA108 - Username Disclosure in Breadcrumb NavXT Wordpress plugin ================================================================================ Author: Janek Vind "waraxe" Date: 26. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-108.html Target descriptio...

WordPress Breadcrumb NavXT 6.1.0 Username Disclosure

Exploit for php platform in category web applications Username Disclosure in Breadcrumb NavXT Wordpress plugin ============================================================ Author: Janek Vind "waraxe" Date: 26. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-108.html...

WordPress FV Flowplayer 7.2.0.727 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Reflected XSS in FV Flowplayer Wordpress plugin ================================================================ Author: Janek Vind "waraxe" Date: 20. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-107.html Target...

WordPress FV Flowplayer 7.2.0.727 Cross Site Scripting

waraxe-2018-SA107 - Reflected XSS in FV Flowplayer Wordpress plugin ================================================================================ Author: Janek Vind "waraxe" Date: 20. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-107.html Target description: FV...

voo.nl XSS vulnerability

Open Bug Bounty ID: OBB-670072 Description| Value ---|--- Affected Website:| voo.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mitsubishi-motors.be XSS vulnerability

Open Bug Bounty ID: OBB-663895 Description| Value ---|--- Affected Website:| mitsubishi-motors.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

loods5.nl XSS vulnerability

Open Bug Bounty ID: OBB-642740 Description| Value ---|--- Affected Website:| loods5.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

loods5.nl XSS vulnerability

Open Bug Bounty ID: OBB-630419 Description| Value ---|--- Affected Website:| loods5.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

illegaletrouw.nl XSS vulnerability

Open Bug Bounty ID: OBB-630008 Description| Value ---|--- Affected Website:| illegaletrouw.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

travel-experts.be XSS vulnerability

Open Bug Bounty ID: OBB-487753 Description| Value ---|--- Affected Website:| travel-experts.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

action.be XSS vulnerability

Vulnerable URL: http://www.action.be/vind-een-winkel-bij-u-de-buurt/?location=%22%3E%3C%2Fiframe%3E%3Cscript%3Ealert%2FOPENBUGBOUNTY%2F%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 02.05.2017 Latest check for patch:| 02.05.2017 11:43 GMT Vulnerability type:| XSS...

Threat Outbreak Alert RuleID22700: Email Messages Distributing Malicious Software on May 5, 2016

Medium Alert ID: 45034 First Published: 2016 May 5 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22700 may contain the following files: Name | Size ...

WordPress Slideshow jQuery Image Gallery Plugin <=2.1.12 - Multiple Vulnerabilities

This plugin is prone to reflected cross site scripting vulnerability in "views/SlideshowPlugin/slideshow.php", "views/SlideshowPluginPostType/settings.php", "views/SlideshowPluginPostType/style-settings.php" and full path disclosure in multiple scripts. Solution Update plugin...

WordPress Slideshow jQuery Image Gallery Plugin <=2.1.12 - Multiple Vulnerabilities

This plugin is prone to reflected cross site scripting vulnerability in "views/SlideshowPlugin/slideshow.php", "views/SlideshowPluginPostType/settings.php", "views/SlideshowPluginPostType/style-settings.php" and full path disclosure in multiple scripts. Solution Update plugin...

Threat Outbreak Alert RuleID15542: Email Messages Distributing Malicious Software on May 27, 2015

Medium Alert ID: 39030 First Published: 2015 May 27 13:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15542 may contain the following files: Name | Size...