CVE-2019-16250

includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...

Design/Logic Flaw

includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...

CVE-2019-16250

CVE-2019-16250 affects the WordPress plugin Ocean Extra (

CVE-2019-16250

includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets CSS token sequence...

WordPress Ocean Extra plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...

Friday Squid Blogging: Why Mexican Jumbo Squid Populations Have Declined

A group of scientists conclude that it's shifting weather patterns and ocean conditions. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Command execution vulnerability in Ocean CMS co***.php file

Ocean CMS is a video-on-demand system designed for webmasters with different needs. A command execution vulnerability exists in the Ocean CMS co.php file. It allows attackers to remotely execute commands and gain server privileges...

Code Execution Vulnerability in Ocean CMS v9.9

Ocean CMS is a content management system designed to address the core needs of webmasters. A code execution vulnerability exists in Ocean CMS v9.9, which can be exploited by attackers to gain control of a web server...

WordPress Ocean Extra plugin <= 1.5.8 - Unauthenticated CSS injection vulnerability

Unauthenticated CSS injection vulnerability found by Jerome Bruandet in WordPress Ocean Extra plugin versions = 1.5.8. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.5.9...

WordPress Ocean Extra plugin <= 1.5.8 - Unauthenticated Settings change vulnerability

Unauthenticated Settings change vulnerability found by Jerome Bruandet in WordPress Ocean Extra plugin versions = 1.5.8. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.5.9...

Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection

The Ocean Extra WordPress plugin was affected by an Unauthenticated Settings change and CSS injection security vulnerability...

SQL Injection Vulnerability in Ocean CMS

Ocean CMS is a content management system designed to address the core needs of webmasters. Ocean CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Blue Ocean Xunjie PBX System

Beijing Blue Ocean Xunjie Communication Technology Co., Ltd. is an enterprise specializing in IP audio and video communication products and solutions. A SQL injection vulnerability exists in the Blue Ocean Xunjie PBX system. An attacker can exploit the vulnerability to obtain sensitive database...

“Funky malware format” found in Ocean Lotus sample

Recently, at the SAS conference I talked about "Funky malware formats"—atypical executable formats used by malware that are only loaded by proprietary loaders. Malware authors use them in order to make static detection more difficult, because custom formats are not recognized as executable by AV...

Ocean Blue Rapid Website Builder System has xss vulnerability

Ocean Blue Rapid Building System is an enterprise building system. Ocean Blue Rapid Website Builder System has an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

Ocean Blue Rapid Website Builder System Exists Override Access Vulnerability

Ocean Blue rapid station-building system is a website building system developed by Shenzhen Ocean Blue Technology Co. Ocean Blue Rapid Website builder system has an override access vulnerability, which can be exploited by attackers to delete other people's account information...

jenkins-plugin-blueocean: XSS vulnerability via user description in Blue Ocean (SECURITY-1204)

An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java,...

jenkins-plugin-blueocean: Blue Ocean did not require CSRF tokens (SECURITY-1201)

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...

CVE-2019-1003013

An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/Export.java, blueocean-commons/src/main/java/io/jenkins/blueocean/commons/stapler/export/ExportConfig.java,...

CVE-2019-1003012

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-core-js/src/js/fetch.ts, blueocean-core-js/src/js/i18n/i18n.js, blueocean-core-js/src/js/urlconfig.js,...