WordPress WP Unique Article Header Image 1.0 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in WP Unique Article Header Image Wordpress Plugin Author: Manideep K cve-id : CVE-2014-9400 Plugin Homepage: https://wordpress.org/plugins/wp-unique-article-header-image/ Version Affected: 1.0 probably lower versions Severity: High Description: Vulnerable...

WordPress twimp-wp Cross Site Request Forgery / Cross Site Scripting

Title: CSRF / Stored XSS Vulnerability in twimp-wp Plugin Author: Manideep K CVE-ID: CVE-2014-9397 Plugin Homepage: https://wordpress.org/plugins/twimp-wp/ Version Affected: probably lower versions Severity: High Description: Vulnerable Parameter: all text boxes , to name one - id &...

WordPress PWG Random 1.11 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in PWG Random Wordpress Plugin Author: Manideep K CVE-ID : CVE-2014-9394 Plugin Homepage: https://wordpress.org/plugins/pwgrandom/ Version Affected: 1.11 probably lower versions Severity: High Description: Vulnerable Parameter: pwgrandomtitle,...

WordPress WP Limit Posts Automatically 0.7 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in WP Limit Posts Automatically Wordpress Plugin Author: Manideep K cve-id: CVE-2014-9401 Plugin Homepage: https://wordpress.org/plugins/wp-limit-posts-automatically/ Version Affected: 0.7 probably lower versions Severity: High Description: Vulnerable...

WordPress Twitter LiveBlog 1.1.2 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in Twitter LiveBlog Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9398 Plugin Homepage: https://wordpress.org/plugins/twitter-liveblog/ Version Affected: 1.1.2 probably lower versions Severity: High Description: Vulnerable Parameter:...

WordPress O2Tweet 0.0.4 CSRF / XSS

Title: CSRF/XSS Vulnerability in O2Tweet WP Plugin Author: Manideep K CVE -ID: CVE-2014-9338 Plugin Homepage: https://wordpress.org/plugins/o2tweet/ Version Affected: 0.0.4 probably lower versions Severity: High Description: Vulnerable Parameter: o2tusername, o2ttags etc About Vulnerability: This...

Mikiurl WordPress Eklentisi 2.0 CSRF / XSS

Title: CSRF/XSS Vulnerability in Mikiurl WordPress Eklentisi WP Plugin Author: Manideep K CVE -D : CVE-2014-9337 Plugin Homepage: https://wordpress.org/plugins/mikiurl-wordpress-eklentisi/ Version Affected:2.0 probably lower versions Severity: High Description: Vulnerable Parameter:...

WordPress wpCommentTwit 0.5 CSRF / XSS

Title: CSRF/XSS Vulnerability in wpCommentTwit WP Plugin Author: Manideep K CVE-ID: CVE-2014-9340 Plugin Homepage: https://wordpress.org/plugins/wpcommenttwit/ Version Affected: 0.5 probably lower versions Severity: High About Plugin: wpCommentTwit is a plugin that will notify you of a new commen...

WordPress iTwitter WP 0.04 CSRF / XSS

Title: CSRF/XSS Vulnerability in iTwitter WP Plugin Author: Manideep K CVE-ID: CVE-2014-9336 Plugin Homepage: https://wordpress.org/plugins/itwitter/ Version Affected: 0.04 probably lower versions Severity: High Description: Vulnerable Parameter: itexttwitterusername, itexttwitteruserpass etc Abo...

WordPress yURL ReTwitt WP 1.4 CSRF / XSS

Title: CSRF/XSS Vulnerability in yURL ReTwitt WP Plugin Author: Manideep K CVE-ID: CVE-2014-9341 Plugin Homepage: https://wordpress.org/plugins/yurl-retwitt/ Version Affected: 1.4 probably lower versions Severity: High About Plugin: This plugin will allow your readers to publish a RT Re-Twitt on...

Keurig 2.0 Authentication Bypass

Overview Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup. Impact CVSS Base Score: 4.9 Impact Subscore: 6.9 Exploitabilit...

CentOS Update for kdenetwork CESA-2014:1827 centos7

Check the version of kdenetwork SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882082";...

UBUNTU-CVE-2014-8651

The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility ntp utility name argument...

CVE-2014-7719

The BASEBALL MANAGER K aka com.cjenm.yagamkgoogle application 1.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7719

The vulnerability CVE-2014-7719 affects the Android application BASEBALL MANAGER K (package com.cjenm.yagamkgoogle) version 1.13. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and read sensitive information via...

CVE-2014-7719

The BASEBALL MANAGER K aka com.cjenm.yagamkgoogle application 1.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

POS Service Confirms Goodwill Breach Lasted 18 Months

Third-party payment vendor C&K Systems released further details this week regarding a breach that affected its systems for 18 months and went on to affect customers who shopped at Goodwill, in addition to two unnamed retailers. The company provided an update on the breach via a press release Mond...

PHP Stock Management System 1.02 - Multiple Persistent Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications ​ Exploit Title: Multiple Persistent Cross Site Scripting Vulnerabilities in PHP Stock Management System 1.02 Date: 25 Aug 2014 Exploit Author: ​Ragha Deepthi K R Vendor Homepage: ​http://www.posnic.com/​ Software Link:​...

hztty 2.0 - Local root exploit (Tested on Red Hat 9.0)

No description provided by source. / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x333 c0wboy$ gcc...

K Web CMS 'sayfala.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30745/info K Web CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...