WordPress Update Fixes XSS, SQL Injection Vulnerabilities

Developers with WordPress fixed three security issues this week, including a cross-site scripting and a SQL injection vulnerability, with the latest version of the CMS. The update, 4.7.2, was pushed Thursday, only two weeks after developers released the previous version. Aaron Campbell, a WordPre...

President Trump's @POTUS Twitter Linked To A Private Gmail Account

It seems like the new American President's Twitter account could easily be hacked due to security blunders he made with the most powerful Twitter account in the world, experts warned. Days after we got to know that the newly inaugurated President Donald Trump was still using his old, insecure...

WordPress 4.2.0-4.7.1 - Press This UI Available to Unauthorised Users

...

deltafarmpress.com XSS vulnerability

Vulnerable URL: http://www.deltafarmpress.com/search/node/test%27%22--%21%3E%3CImage%0CSrcset%3D.%0COnerror%3Dconfirm%60openbugbounty%60%20/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

classifieds.sheboyganpress.com XSS vulnerability

Vulnerable URL: http://classifieds.sheboyganpress.com/category.php?ft=OPENBUGBOUNTY%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

atlantis-press.com XSS vulnerability

Vulnerable URL: http://www.atlantis-press.com/php/downloadpaper.php?id=25842419%27"--!confirmOPENBUGBOUNTY%3C/script /K/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 334178 VIP...

login.press-citizen.com XSS vulnerability

Vulnerable URL: https://login.press-citizen.com/PIOC-GUP/authenticate/?from-state=returning-user-get-redirect%27%22--%3E%3C/Title/%3E%3C/Script/%3E%3CSvg%20/Onload=confirmOPENBUGBOUNTY%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XS...

WordPress: Wordpress 4.7 - CSRF -> HTTP SSRF any private ip:port and basic-auth

Description This report is a variant on report 110801 but with broader vector. 110801 was a XSRF SSRF that allowd unintended GET requests to 0.0.0.0 on port 80, 443 and 8080. This vulnerability uses same entry vector of the press this scrape function but entirely bypasses the ip and port filter...

workday.com XSS vulnerability

Vulnerable URL: https://www.workday.com/fr-fr/company/newsroom/press-releases/press-release-details.html?id=20391911'"...

winnipegfreepress.com XSS vulnerability

Vulnerable URL: http://www.winnipegfreepress.com/search/?keywords=abcdef%3C%3Ca%3Cb%3Escript%3Ci%3E%3Ealert%28/OPENBUGBOUNTY/%29%3C%3Ca%3Cb%3E/script%3E=y=-startDate Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:24 GMT Vulnerability type:|...

PHP Press Release Cross-Site Scripting Vulnerability

PHP Press Release is a software that allows you to manage your organization's press releases via the web, and the public can access recent releases via the web. A stored cross-site scripting vulnerability exists in the title parameter of the administration.php page of PHP Press Release, which can...

PHP Press Release Cross-Site Request Forgery Vulnerability

PHP Press Release is a software that allows you to manage your organization's press releases via the web, and the public can access recent releases via the web. A cross-site request forgery vulnerability exists in the administration.php page of PHP Press Release, which can be exploited by an...

PHP Press Release - Persistent Cross-Site Scripting

PHP Press Release - Persistent Cross-Site Scripting Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

PHP Press Release - Cross-Site Request Forgery Add Admin Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link...

PHP Press Release - Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

PHP Press Release - Persistent Cross-Site Scripting

Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link : http://www.pagereactions.com/downloads/phppressrelease.zip Description :...

PHP Press Release - Cross-Site Request Forgery (Add Admin)

Exploit Title : PHP Press Release - Cross-Site Request Forgery Add Admin - Super User Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

deltafarmpress.com XSS vulnerability

Vulnerable URL: http://deltafarmpress.com/search/results/" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 582676 VIP website status:| No Check...

archive.tallinnmusicweek.ee XSS vulnerability

Vulnerable URL: http://archive.tallinnmusicweek.ee/2011/press.php?cat=1"=28 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...