CVE-2017-18508

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS...

CVE-2017-18508

The wp-live-chat-support WordPress plugin is vulnerable to Cross-Site Scripting (XSS) in all versions prior to 7.1.03. The issue stems from improper validation of client-side data, enabling an attacker to execute arbitrary script in a victim’s browser. Remediation: upgrade to version 7.1.03 or la...

CVE-2016-10879

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS...

CVE-2016-10879

CVE-2016-10879 concerns the WordPress plugin wp-live-chat-support prior to version 6.2.02, which is reported to be vulnerable to cross-site scripting (XSS). The available connected sources describe the issue as caused by a lack of proper validation of client-side data in the plugin, enabling pote...

PT-2019-7675 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 6.2.02 Description: The issue is related to a security problem where an attacker can execute malicious scripts. Recommendations: For versions prior to 6.2.02, update to version 6.2.02 or later to...

PT-2019-13887 · WordPress · Wp-Live-Chat-Support

Name of the Vulnerable Software and Affected Versions: wp-live-chat-support plugin versions prior to 8.0.27 Description: The issue is related to a security problem where an attacker can exploit the GDPR page to execute malicious scripts, potentially leading to unauthorized access or data theft...

Oracle Linux 8 : pacemaker (ELSA-2019-1279)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1279 advisory. - Improve clients' authentication of IPC servers CVE-2018-16877 - Fix use-after-free with potential information disclosure CVE-2019-3885 - Improve...

penetration

This repository contains a collection of exploit code and proof-of-concept PoC attacks targeting various web applications, including CMS platforms. The exploits are categorized by the affected product or service, and the vulnerability class or vector is identified. The exploits are: 1. 0day &...

pacemaker security and bug fix update

2.0.1-4.3 - New build with fixed test in gating.yaml - Resolves: rhbz1694557 - Resolves: rhbz1695247 - Resolves: rhbz1697264 - Resolves: rhbz1697265 2.0.1-4.2 - New build to apply z-stream tag - Resolves: rhbz1694557 - Resolves: rhbz1695247 - Resolves: rhbz1697264 - Resolves: rhbz1697265 2.0.1-4....

Product update: Virtuozzo 7.0 Update 11 (7.0.11-293)

The Update 11 for Virtuozzo 7.0 provides new features as well as stability and usability bug fixes. It also introduces a new kernel 3.10.0-957.12.2.vz7.96.21. Vulnerability id: PSBM-82223 Under certain circumstances, a VM with IDE disks could crash or corrupt guest data during migration or snapsh...

CVE-2018-18570

Planon before Live Build 41 has XSS...

CVE-2018-18570

Planon before Live Build 41 has XSS...

Cross site scripting

Planon before Live Build 41 has XSS...

CVE-2018-18570

Planon before Live Build 41 has XSS...

CVE-2018-18570

Planon before Live Build 41 is vulnerable to Cross-Site Scripting (XSS). The Nuclei template and related descriptions confirm an XSS flaw in Planon prior to Live Build 41, enabling an attacker to execute arbitrary scripts in a victim’s browser and potentially lead to session hijacking, defacement...

New OTT Service Changing How New Zealanders Watch Sports

Communications service providers are looking for new ways to gain an edge in today's competitive market. In sports-crazed New Zealand, one of the country's largest telecom providers just launched an all-sports video service to attract new subscribers. Spark Sport is a new over-the-top OTT offerin...

Watch Robert Mueller's Testimony Live Right Here

Robert Mueller will testify before Congress Wednesday in two separate hearings. You can watch it right here, but first make sure to manage your expectations...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1935-1) (SACK Slowness)

This update for the Linux Kernel 3.12.74-6064115 fixes one issue. The following security issue was fixed : This update contains a regression fix for CVE-2019-11478 bsc1140747. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

WordPress WP Live Chat Plugin Arbitrary File Upload (CVE-2019-11185)

An Arbitrary File Upload vulnerability exists in WordPress Live Chat Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the effected system...

HiddenEye - Modern Phishing Tool With Advanced Functionality (Android-Support-Available)

Modern Phishing Tool With Advanced Functionality PHISHING | KEYLOGGER | INFORMATIONCOLLECTOR | ALLINONETOOL | SOCIALENGINEERING DEVELOPERS & CONTRIBUTORS 1. ANONUD4Y https://github.com/An0nUD4Y 2. USAMA ABDUL SATTAR https://github.com/usama7628674 3. sTiKyt https://github.com/sTiKyt 4. UNDEADSEC...