3693 matches found
[SYSS-2015-027] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-027 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Cross-Site Scripting...
[SYSS-2015-032] Broken Authentication and Session Management (CWE-930) in Page2Flip Premium App 2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-032 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Broken Authentication...
[SYSS-2015-026] Denial of Service (CWE-730) and Overly Restrictive Account Lockout Mechanism (CWE-645) in Page2Flip Premium App 2.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-026 Product: Page2Flip Vendor: w!ssenswerft GmbH Affected Versions: Premium App 2.5, probably also in Business App and Basic App, and in lower versions Tested Versions: Premium App 2.5 Vulnerability Type: Denial of Service...
Google Analytics By Yoast Premium 5.4.4 Cross Site Scripting
Details ================ Software: Google Analytics by Yoast Premium Version: 5.4.4 Homepage: https://yoast.com/wordpress/plugins/google-analytics/ Advisory report: https://security.dxw.com/advisories/xss-in-google-analytics-by-yoast-premium-by-privileged-users/ CVE: Awaiting assignment CVSS: 5.5...
premiumpropertyspecialists.com.au XSS vulnerability
Vulnerable URL: http://www.premiumpropertyspecialists.com.au/search.php?s=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 818643...
Google Pulls ClickFraud App from Google Play
A malicious Android app spoofing the popular BatteryBot Pro app has been pulled from Google Play. Researchers at Zscaler reported the app, which had a package name of com.polaris.BatteryIndicatorPro. The app requested excessive permissions from the user in an attempt to get full control of an...
WordPress SmartIT Premium Responsive - Information Disclosure
Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...
WordPress Freely Premium Theme - Information Disclosure
Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...
WordPress Axioma Premium Responsive Theme - Information Disclosure
Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...
WordPress Blessing Premium Responsive Theme - Information Disclosure
Because of this vulnerability, the attackers can obtain sensitive information. Solution Update the theme...
BullGuard Premium Protection Authentication Bypass Vulnerability
BullGuard Premium Protection is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress Codilight Premium theme <= 1.0.0 - XSS
This theme is prone to a cross site scripting vulnerability in admin/front-end/options.php "reset" parameter. Solution Update the theme...
WordPress The7 Premium Theme <= 2.1.0 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the theme...
WeeklyNews Premium Theme <= 2.2 - Cross-Site Scripting (XSS)
Vendor confirmed fixed in as 2.2.9 although this issue was not mentioned in the changelog. PoC http://www.example.com/?s=test"...
WeeklyNews Premium Theme <= 2.2 - Cross-Site Scripting (XSS)
Vendor confirmed fixed in as 2.2.9 although this issue was not mentioned in the changelog. http://www.example.com/?s=test"...
WordPress Premium SEO Pack Plugin <= 1.8.0 - Multiple Vulnerabilities
This plugin is prone to a local file disclosure and remote code execution vulnerabilities. Solution Update the plugin...
Premium SEO Pack 1.8.0 - Unauthenicated Arbitrary File Upload & LFD
This plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. PoC BASE64 ENCODED SHELL...
WordPress Ajax Store Locator 1.2 SQL Injection Vulnerability
WordPress Ajax Store Locator versions 1.2 and below suffer from a remote SQL injection vulnerability. Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SE...
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...