kernel: ipv6: make fragment identifications less predictable

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...

kernel-rt: stack corruption when task gets scheduled out using the debug stack

The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service stack corruption and panic via a crafted application that triggers certain lock contention...

Cross site scripting

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

Path traversal

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter...

CVE-2012-0895

The CVE-2012-0895 issue affects the WordPress Count Per Day plugin; XSS vulnerability in map/map.php can be triggered via the map parameter and is present in versions before 3.1.1. Remediation: upgrade to version 3.1.1 or later. If upgrading is not possible, apply vendor advisories/workarounds fr...

CVE-2012-0896

CVE-2012-0896 affects the WordPress Count Per Day plugin, via download.php the f parameter allows absolute path traversal to read arbitrary files. The issue is in Count Per Day

CVE-2012-0895

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

CVE-2012-0896

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter...

CVE-2012-0896: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter...

CVE-2012-0895: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

PT-2012-2929

Name of the Vulnerable Software and Affected Versions Count Per Day module versions prior to 3.1.1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the map parameter in the map/map.php file. Recommendations For...

PT-2012-2930

Name of the Vulnerable Software and Affected Versions Count Per Day module versions prior to 3.1.1 for WordPress Description The issue allows remote attackers to read arbitrary files via the f parameter in the download.php file. This is due to an absolute path traversal vulnerability...

WordPress Count-Per-Day File Download / Cross Site Scripting

Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: '...

WordPress Count per Day Plugin Arbitrary File Download and XSS Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; if description...

WordPress Plugin Count Per Day - Multiple Vulnerabilities

WordPress Plugin Count Per Day - Multiple Vulnerabilities Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: '...

Wordpress Count-per-day plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: ' 0day.today 2018-03-03...

WordPress Count per Day Plugin - Multiple Vulnerabilities

WordPress Count per Day plugin is prone to multiple vulnerabilities such as XSS and user could call a remote script to download arbitrary file from the target system. Solution Update the plugin...

WordPress Plugin Count Per Day - Multiple Vulnerabilities

Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: '...

IrfanView - '.tiff' Image Processing Buffer Overflow

Application: IrfanView TIFF Image Processing Buffer Overflow Vulnerability Platforms: Windows Exploitation: Remote code execution Secunia Number: SA47065 PRL: 2011-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introductio...

CVE-2011-4853: Exposure of Sensitive Information to an Unauthorized Actor

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by smb/user/list-data/items-per-page/ and certain other files...