Lucene search
K

159 matches found

Cvelist
Cvelist
added 2022/07/28 4:35 p.m.19 views

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

7.7AI score0.01017EPSS
Exploits1References2
CVE
CVE
added 2022/07/28 4:35 p.m.50 views

CVE-2016-0796

Summary (CVE-2016-0796): The WordPress plugin mb.miniAudioPlayer—HTML5 audio player for your mp3 files (versions 1.7.6 and earlier)—is vulnerable due to improper validation of user-supplied input, enabling open proxy and security bypass scenarios. Impact includes attacker-initiated actions from a...

7.5CVSS7.6AI score0.01017EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/07/28 12:0 a.m.2 views

WordPress Plugin mb.miniAudioPlayer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS7.4AI score0.01017EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/07/28 12:0 a.m.4 views

PT-2022-7842 · WordPress · Mb.Miniaudioplayer

Name of the Vulnerable Software and Affected Versions: WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files version 1.7.6 WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files versions prior to 1.7.6 Description: The WordPress Plugin...

7.5CVSS7.5AI score0.01017EPSS
Exploits1References4
Packet Storm
Packet Storm
added 2022/03/22 12:0 a.m.251 views

Backdoor.Win32.Agent.bxxn Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/dcbc237f21839a6514c8321d5fa631a4.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.bxxn Vulnerability: Open Proxy Description: The malware listens on TCP port 108...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2021/12/13 12:0 a.m.209 views

Backdoor.IRC.Subhuman Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/f93e64ac9c3383d0df23662a78a76c07.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.IRC.Subhuman Vulnerability: Unauthenticated Open Proxy Description: The malware listens on...

0.1AI score
Exploits0
Fortinet
Fortinet
added 2021/12/07 12:0 a.m.23 views

FortiWeb - Confused deputy issue on SERVER_NAME causes open proxy flaw

An unintended proxy or intermediary 'Confused Deputy' CWE-441 in FortiWeb may allow an authenticated attacker to use the device as proxy to reach any protected host via crafted HTTP requests...

6.5CVSS6.1AI score0.00807EPSS
Exploits0Affected Software1
Packet Storm
Packet Storm
added 2021/11/08 12:0 a.m.373 views

Trojan.Win32.SkynetRef.x Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/339ec4617eababfd46006f2219e68cb8.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.SkynetRef.x Vulnerability: Unauthenticated Open Proxy Description: The malware listens ...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/11/08 12:0 a.m.431 views

Trojan.Win32.SkynetRef.y Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e2d249f86890d290bb8af599ea0367f3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.SkynetRef.y Vulnerability: Unauthenticated Open Proxy Description: The malware listens ...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/11/08 12:0 a.m.358 views

Backdoor.Win32.Hupigon.nqr Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9603420a004d9559e610ddeb9d94e20a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.nqr Vulnerability: Unauthenticated Open Proxy Description: The malware listen...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/28 12:0 a.m.451 views

Backdoor.Win32.Hupigon.acio Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/21f324a6a62d8125bc83b8d1865e17f9B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.acio Vulnerability: Unauthenticated Open Proxy Description: The malware...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/28 12:0 a.m.469 views

Backdoor.Win32.Mazben.es Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/fcd611ccbc756fab43761f4b18372b81.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Mazben.es Vulnerability: Unauthenticated Open Proxy Description: The malware listens ...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/28 12:0 a.m.487 views

HEUR.Backdoor.Win32.Generic Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6a96fc226fbe9f0efbcc8a7b2e34b807.txt Contact: [email protected] Media: twitter.com/malvuln Threat: HEUR.Backdoor.Win32.Generic Vulnerability: Unauthenticated Open Proxy Description: The malware liste...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/18 12:0 a.m.427 views

Trojan-Proxy.Win32.Ranky.dh Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/dcc58648868f1d5c0d7c53250f1bd5c9.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Ranky.dh Vulnerability: Unauthenticated Open Proxy Description: The malware liste...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/18 12:0 a.m.345 views

Trojan-Proxy.Win32.Ranky.z Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e312385f64e6b8fd667b4f9b5ea1ff70.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Ranky.z Vulnerability: Unauthenticated Open Proxy Description: The malware listen...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/10/05 12:0 a.m.235 views

Backdoor.Win32.Hupigon.gy Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/be74cbb86c007309d8004d910f5270f7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.gy Vulnerability: Unauthenticated Open Proxy Description: The malware listens...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/09/27 12:0 a.m.194 views

Backdoor.Win32.Hupigon.fjcd Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/284f36e35db6a0aa9a493f39d834367e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.fjcd Vulnerability: Unauthenticated Open Proxy Description: The malware liste...

0.1AI score
Exploits0
OSV
OSV
added 2021/09/22 11:15 a.m.2 views

CVE-2021-39339

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the /bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0...

5.3CVSS6.1AI score0.01333EPSS
Exploits0References2
NVD
NVD
added 2021/09/22 11:15 a.m.7 views

CVE-2021-39339

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the /bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0...

5.8CVSS0.01333EPSS
Exploits0References2
Prion
Prion
added 2021/09/22 11:15 a.m.13 views

Server side request forgery (ssrf)

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the /bypass.php file due to a user-supplied URL request value that gets called by a curl requests. This affects versions up to, and including, 1.8.0...

5CVSS5.2AI score0.01333EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder