766 matches found
New Coalition Launches Fight Against Patriot Act Section 215
A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...
Multiple SQL Injection Vulnerabilities in Absolut Engine
Absolut Engine is a press release system. Absolut Engine has multiple SQL injection vulnerabilities. Due to the program failing to adequately filter user-supplied input. An attacker could exploit the vulnerabilities to compromise the application and access or modify data...
FreeBSD : wordpress -- multiple vulnerabilities (5e135178-8aeb-11e4-801f-0022156e8794)
MITRE reports : wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message. wp-includes/http.php in WordPress before 3.7.5,...
Microsoft Could Kill Internet Explorer; New Spartan Browser Coming Soon
Bad News for Internet Explorer fans, if any! Microsoft's almost 20 years old Web browser with a big blue E sign might soon be a thing of the past. With the arrival of Windows 10, probably by next fall, Microsoft could come up with its brand new browser that’s more similar to Mozilla's Firefox and...
DSA-3085-1 wordpress - security update
Bulletin has no description...
CVE-2014-9035
Cross-site scripting XSS vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
DEBIAN-CVE-2014-9035
Cross-site scripting XSS vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-9035
Cross-site scripting XSS vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-9035
CVE-2014-9035 is an XSS in WordPress “Press This” exposed before WordPress 4.0.1 (affecting 3.7.x–3.9.x and 4.x prior to 4.0.1). Exploitation could allow remote attackers to inject arbitrary scripts via unspecified vectors. Public references in Debian/ Mageia/ Fedora advisories and OpenVAS/Nessus...
CVE-2014-9035: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
WordPress <= 4.0.0 - XSS #2
Because of this vulnerability in the "Press This" function, the attackers can inject arbitrary web script or HTML via unspecified vectors. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-0-0-xss http://db.threatpress.com/vulnerability/wordpress/wordpress-4-0-0-xss-3...
CVE-2014-7459
The Press-Leader aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E application 1.0011.b0011 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Press-Leader aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E application 1.0011.b0011 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7459
The Press-Leader aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E application 1.0011.b0011 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7459
The CVE-2014-7459 entry concerns the Android application Press-Leader (com.soln.S95309F65AD59F99CFC2C710A517B0B7E) version 1.0011.b0011 that does not verify X.509 certificates from SSL servers. This improper certificate validation allows man-in-the-middle attackers to spoof servers and obtain sen...
CVE-2014-7459: Undefined Security Weakness
The Press-Leader aka com.soln.S95309F65AD59F99CFC2C710A517B0B7E application 1.0011.b0011 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
WordPress <= 3.0.5 wp-admin/press-this.php Privilege Escalation
...
Pre Printing Press product_desc.php (pid) SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bu...