BullGuard Premium Protection Authentication Bypass Vulnerability

BullGuard Premium Protection is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Codilight Premium theme <= 1.0.0 - XSS

This theme is prone to a cross site scripting vulnerability in admin/front-end/options.php "reset" parameter. Solution Update the theme...

WordPress The7 Premium Theme <= 2.1.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the theme...

WeeklyNews Premium Theme <= 2.2 - Cross-Site Scripting (XSS)

Vendor confirmed fixed in as 2.2.9 although this issue was not mentioned in the changelog. PoC http://www.example.com/?s=test"...

WeeklyNews Premium Theme <= 2.2 - Cross-Site Scripting (XSS)

Vendor confirmed fixed in as 2.2.9 although this issue was not mentioned in the changelog. http://www.example.com/?s=test"...

WordPress Premium SEO Pack Plugin <= 1.8.0 - Multiple Vulnerabilities

This plugin is prone to a local file disclosure and remote code execution vulnerabilities. Solution Update the plugin...

Premium SEO Pack 1.8.0 - Unauthenicated Arbitrary File Upload & LFD

This plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. PoC BASE64 ENCODED SHELL...

WordPress Ajax Store Locator 1.2 SQL Injection Vulnerability

WordPress Ajax Store Locator versions 1.2 and below suffer from a remote SQL injection vulnerability. Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SE...

WordPress Ajax Store Locator 1.2 SQL Injection

Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending pr...

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...

WordPress Plugin Ajax Store Locator 1.2 - SQL Injection

Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQL' extending provided level 1 and risk 1 values? Y/n 18:24...

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download

WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download Exploit Title : WordPress Slider Revolution Responsive = 4.1.4 Arbitrary File Download vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/slider-revolution-responsive-wordpress-plugin/27513...

AVCaesar - Malware Analysis Engine and Repository

AVCaesar is a malware analysis engine and repository, developed by malware.lu within the FP7 project CockpitCI. Functionalities AVCaesar can be used to: Perform an efficient malware analysis of suspicious files based on the results of a set of antivirus solutions, bundled together to reach the...

Jolla Phone URI Spoofing

-------------------------- NSOADV-2015-001 --------------------------- Jolla Phone tel URI Spoofing 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 111...

Samsung Galaxy S6 and Galaxy S6 Edge — 8 Things You Should Know

A whole lot of things gone in the official kickoff of Mobile World Congress 2015, but a unique phone with a curved screen on both sides of the device acquired everybody’s attention. That’s what unveiled by Samsung late Sunday. Samsung has officially unveiled its next-generation flagship Smartphon...

BullGuard Premium Protection Detection (Windows SMB Login)

Detects the installed version of BullGuard Premium Protection. The script logs in via smb, searches for SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

WordPress Ajax Store Locator 1.2 Arbitrary File Download

WordPress Ajax Store Locator plugin version 1.2 suffers from an arbitrary file download vulnerability. Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356...

WordPress Ajax Store Locator 1.2 Arbitrary File Download

Exploit Title : Wordpress Ajax Store Locator = 1.2 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : http://codecanyon.net/item/ajax-store-locator-wordpress/5293356 Software Link : Premium Dork Google: inurl:ajax-store-locator index of ajax-store-locator Date : 2014-12-06...

Schneider Electric Modicon Premium PLC Detection

Binary data 7151.pasl...

Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability

No description provided by source. Exploit Title : Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability Author : Hannaichi @dntkun Date : February 5th, 2014 Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : Unauthenticated...