1740 matches found
CVE-2016-1209
CVE-2016-1209 affects WordPress Ninja Forms, with vulnerable versions 2.9.36 to 2.9.42 (and 2.9.42.1 as fix variants) allowing remote PHP object injection via crafted POST data, enabling unauthenticated code execution through file upload. Exploitation details are evidenced by Metasploit/Exploit-D...
CVE-2016-1209
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request...
WordPress plugin "Ninja Forms" vulnerable to PHP object injection
Overview WordPress plugin "Ninja Forms" contains a PHP object injection vulnerability due to a flaw where untrusted POST values are unserialized. Impact A remote attacker may execute an arbitrary PHP code. Solution Update the Software Update to a version that addresses the vulnerability according...
JVN#44657371: WordPress plugin "Ninja Forms" vulnerable to PHP object injection
WordPress plugin "Ninja Forms" contains a PHP object injection vulnerability due to a flaw where untrusted POST values are unserialized. Impact A remote attacker may execute an arbitrary PHP code. Solution Update the Software Update to a version that addresses the vulnerability according to the...
a.cocaine.ninja XSS vulnerability
Vulnerable URL: https://a.cocaine.ninja/svcjuv.svg Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
Ninja Forms 2.9.36 to 2.9.42 - Multiple Vulnerabilities
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Ninja Forms Unauthenticated File Upload
Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin contain an unauthenticated file upload vulnerability, allowing guests to upload arbitrary PHP code that can be executed in the context of the web server. Module Options msf use exploit/multi/http/wp/ninjaformsunauthenticatedfileupload msf...
WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'WordPress Ninja Forms Unauthenticated File Upload', 'Description' = % Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin...
WordPress Ninja Forms Unauthenticated File Upload
Versions 2.9.36 to 2.9.42 of the Ninja Forms plugin contain an unauthenticated file upload vulnerability, allowing guests to upload arbitrary PHP code that can be executed in the context of the web server...
Guess Character Ninja Anime - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Guess Character Ninja Anime published at the 'play' market has multiple vulnerabilities...
Ninja Rush - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ninja Rush published at the 'play' market has multiple vulnerabilities...
Golden Ninja Temple Run - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Golden Ninja Temple Run published at the 'play' market has multiple vulnerabilities...
Yoo Ninja! Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Yoo Ninja! Free published at the 'play' market has multiple vulnerabilities...
Spring Ninja - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Spring Ninja published at the 'play' market has multiple vulnerabilities...
Ninja Chicken - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ninja Chicken published at the 'play' market has multiple vulnerabilities...
Fruit Ninja Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Fruit Ninja Free published at the 'play' market has multiple vulnerabilities...
Ninja Adventure Time:Dark Path - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Ninja Adventure Time:Dark Path published at the 'play' market has multiple vulnerabilities...
Devil Ninja 2 - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Devil Ninja 2 published at the 'play' market has multiple vulnerabilities...
Turtle Ninja Jump - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Turtle Ninja Jump published at the 'play' market has multiple vulnerabilities...
Ninja Fishing - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Ninja Fishing published at the 'play' market has multiple vulnerabilities...