856 matches found
Europol and IT Security Companies Team Up to Combat Ransomware Threat
No More Ransom, so is the Ransomware Threat. The European Police agency Europol has joined forces with police and cyber security companies to launch a worldwide initiative to combat and tackle together the exponential growth of Ransomware used by cyber criminals. Europol announced today the...
more-salesagency.de XSS vulnerability
Open Bug Bounty ID: OBB-154990 Description| Value ---|--- Affected Website:| more-salesagency.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
MVG more - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MVG more published at the 'play' market has multiple vulnerabilities...
WYSIWYG Network Packet Editor: WireEdit
WYSIWYG Network Packet Editor WireEdit is first-of-a-kind and the only full stack cross-platform WYSIWYG network packets editor. It allows editing packets data at all stack layers as “rich text” in a simple point-and-click interface. The input and output format is Pcap. Is WireEdit a Pcap Editor?...
WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery
WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery Date: 28-02-2016 Software Link: https://wordpress.org/support/plugin/more-fields Exploit Author: Aatif Shahdad Twitter: https://twitter.com/61617469665f736...
WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery
Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery Date: 28-02-2016 Software Link: https://wordpress.org/support/plugin/more-fields Exploit Author: Aatif Shahdad Twitter: https://twitter.com/61617469665f736 Contact: [email protected] Category: webapps 1. Description...
WordPress More Fields Plugin 2.1 - CSRF
This vulnerability is disabled for all functions add box and delete box options. Because of that, an attacker can add or delete extra fields in additional boxes on the edit page in the Admin. Solution Upgrade the plugin...
WordPress More Fields 2.1 Cross Site Request Forgery
Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery Date: 28-02-2016 Software Link: https://wordpress.org/support/plugin/more-fields Exploit Author: Aatif Shahdad Twitter: https://twitter.com/61617469665f736 Contact: [email protected] Category: webapps 1. Description...
WordPress More Fields 2.1 Plugin - Cross-Site Request Forgery
Exploit for php platform in category web applications Exploit Title: Wordpress More Fields Plugin 2.1 Cross-Site Request Forgery Date: 28-02-2016 Software Link: https://wordpress.org/support/plugin/more-fields Exploit Author: Aatif Shahdad Twitter: https://twitter.com/61617469665f736 Contact:...
Apple Mac OSX Kernel - no-more-senders Use-After-Free
Apple Mac OSX Kernel - no-more-senders Use-After-Free / Source: https://code.google.com/p/google-security-research/issues/detail?id=567 Kernel UaF due to audit session port failing to correctly account for spoofed no-more-senders notifications Tested on ElCapitan 10.11 15a284 on MacBookAir 5,2 / ...
Apple Mac OSX Kernel - no-more-senders Use-After-Free
/ Source: https://code.google.com/p/google-security-research/issues/detail?id=567 Kernel UaF due to audit session port failing to correctly account for spoofed no-more-senders notifications Tested on ElCapitan 10.11 15a284 on MacBookAir 5,2 / // ianbeer / Kernel UaF due to audit session port...
WordPress Ajax Load More Plugin 2.8.1.1 - PHP Upload
Ajax Load More plugin is prone to a PHP upload vulnerability that allows to get remote code execution. Solution Upgrade the plugin...
WordPress Ajax Load More PHP Upload
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Ajax Load More PHP Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in the WordPres...
WordPress Plugin Ajax Load More 2.8.1.1 - PHP Upload (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Wordpress Ajax Load More PHP Upload Vulnerability', 'Description' = %q This module exploits an arbitrary file upload in the WordPres...
Wordpress Ajax Load More Plugin 2.8.1.1 Upload Shell Exploit
This Metasploit module exploits an arbitrary file upload in the WordPress Ajax Load More version 2.8.1.1. It allows you to upload arbitrary php files and get remote code execution. This Metasploit module has been tested successfully on WordPress Ajax Load More 2.8.0 with WordPress 4.1.3 on Ubuntu...
Wordpress Ajax Load More Plugin < 2.8.2 - File Upload Vulnerability
Exploit for php platform in category web applications This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress Plugin ajax-load-more Authenticated Arbitrary File Upload',...
WordPress Plugin Ajax Load More < 2.8.2 - Arbitrary File Upload
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress Plugin ajax-load-more Authenticated Arbitrary File Upload', 'Description' = %q This module exploits an authenticated...
Ajax Load More <= 2.8.1.1 - Authenticated File Upload & Deletion
Authenticated file upload in file ajax-load-more/admin/admin.php file, in the function almsaverepeater. The variable $f is set to a predictable PHP file path, and then the content of the variable $c is written into that file. The following code proves that this second variable is also set from...
Wordpress Ajax Load More PHP Upload Vulnerability
This module exploits an arbitrary file upload in the WordPress Ajax Load More version 2.8.1.1. It allows to upload arbitrary php files and get remote code execution. This module has been tested successfully on WordPress Ajax Load More 2.8.0 with Wordpress 4.1.3 on Ubuntu 12.04/14.04 Server. Modul...
Oracle: Security Advisory (ELSA-2015-0674)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...