Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2018-3169, CVE-2014-7810, CVE-2018-1767)

Summary There are multiple vulnerabilities in Websphere that is used by Control Center. Vulnerability Details CVEID: CVE-2018-3169 refer to CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArray and...

premium-foods.com Cross Site Scripting vulnerability OBB-1234826

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress Golo premium theme <= 1.3.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Vlad Vector in WordPress Golo premium theme versions = 1.3.2. Solution Update the WordPress Golo premium theme to the latest available version at least 1.3.3...

WordPress Findus premium theme <= 1.1.14 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Findus premium theme versions = 1.1.14. Solution Update the WordPress Findus premium theme to the latest available version at least 1.1.15...

WordPress Workio premium theme <= 1.0.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Vlad Vector in WordPress Workio premium theme versions = 1.0.2. Solution Update the WordPress Workio premium theme to the latest available version at least 1.0.3...

WordPress Jetapo premium theme <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Jetapo premium theme versions = 1.0. Solution Update the WordPress Jetapo premium theme to the latest available version at least 1.1...

WordPress Findgo premium theme <= 1.3.30 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Findgo premium theme versions = 1.3.30. Solution Update the WordPress Findgo premium theme to the latest available version at least 1.3.32...

WordPress Findgo premium theme <= 1.3.30 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Findgo premium theme versions = 1.3.30. Solution Update the WordPress Findgo premium theme to the latest available version at least =1.3.32...

WordPress Kormosala premium theme <= 1.0.22 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Kormosala premium theme versions = 1.0.22. Solution Update the WordPress Kormosala premium theme to the latest available version at least 1.0.23...

WordPress InJob premium theme <= 3.4.0 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress InJob premium theme versions = 3.4.0. Solution Update the WordPress InJob premium theme to the latest available version at least 3.4.1...

Joker Malware Apps Once Again Bypass Google's Security to Spread via Play Store

Cybersecurity researchers took the wraps off yet another instance of Android malware hidden under the guise of legitimate applications to stealthily subscribe unsuspecting users for premium services without their knowledge. In a report published by Check Point research today, the malware —...

WordPress Monalisa premium theme <= 2.0.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Monalisa premium theme versions = 2.0.9. Solution Update the WordPress Monalisa premium theme to the latest available version at least 2.1.3...

WordPress Careerfy premium theme <= 4.0.0 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities discovered by m0ze in WordPress Careerfy premium theme versions = 4.0.0. Solution Update the WordPress Careerfy premium theme to the latest available version at least 4.1.0...

WordPress JobSearch premium plugin <= 1.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress JobSearch premium plugin versions = 1.5.2. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.5.3...

WordPress JobSearch premium plugin <= 1.5.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (profile pages)

Authenticated Persistent Cross-Site Scripting XSS vulnerability profile pages discovered by m0ze in WordPress JobSearch premium plugin versions = 1.5.2. Solution Update the WordPress JobSearch premium plugin to the latest available version at least 1.5.3...

WordPress CarrerUp premium theme <= 2.3.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarrerUp premium theme versions = 2.3.0. Solution Update the WordPress CarrerUp premium theme to the latest available version at least 2.3.1...

WordPress Nexos premium theme <= 1.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...

WordPress Nexos premium theme <= 1.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...

premiumwheels.de Cross Site Scripting vulnerability OBB-1208239

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress CityBook premium theme <= 2.4.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Vlad Vector in WordPress CityBook premium theme versions = 2.4.3. Solution Update the WordPress CityBook premium theme to the latest available version at least 2.4.4...