WordPress Delicious Recipes – WordPress Recipe plugin <= 1.3.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Delicious Recipes – WordPress Recipe plugin versions = 1.3.4. Solution Update the WordPress Delicious Recipes – WordPress Recipe plugin to the latest available version at least 1.3.5...

Moderate: python-cryptography security, bug fix, and enhancement update

The python-cryptography packages contain a Python Cryptographic Authority's PyCA's cryptography library, which provides cryptographic primitives and recipes to Python developers. The following packages have been upgraded to a later upstream version: python-cryptography 3.2.1. BZ1873581, BZ1891947...

Grocy Cross-Site Scripting Vulnerability

Grocy is a web-based self-hosted grocery and home management solution for families by individual developers. The platform is an ERP system for families written in PHP. A cross-site scripting vulnerability exists in Grocy version 2.7.1 and prior versions. The vulnerability is related to a running...

greatindianrecipes.com Cross Site Scripting vulnerability OBB-1379466

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

worldrecipesblog.com Cross Site Scripting vulnerability OBB-1368287

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Emotet's Thanksgiving Campaign Delivers New Recipes for Compromise

Emotet, the seemingly ubiquitous banking trojan, has turned up again after a small hiatus, this time as the anchor in a Thanksgiving-themed campaign that cranked up in the U.S. this week. It has also upgraded its capabilities with new tactics and modules, which has boosted its efficacy, according...

CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]

The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...

[SECURITY] Fedora 28 Update: python-cryptography-2.3-1.fc28

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

smithfield.com XSS vulnerability

Vulnerable URL: http://www.smithfield.com/recipeready/recipes.php?recipe=1/-///'/"//--...

CVE-2017-8940

The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Wordpress recipes-writer plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site. recipes-writer is one of the plug-ins used to write a standardized blog. A cross-site scripting vulnerability...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4...

CVE-2016-1000147

CVE-2016-1000147 affects the WordPress plugin recipes-writer up to version 1.0.4, with a Reflected XSS vulnerability in the plugin. The issue is documented across multiple sources (NVD entry states Reflected XSS in recipes-writer v1.0.4; patches/advisories from Patchstack and WPVulndb reiterate X...

Recipes Writer <= 1.0.4 - XSS

Plugin is still affected and has been closed...

Instacart: Stored XSS

First log in account. We headed to the "lists and recipes" option https://www.instacart.com/store/demo/lists create a new list "add list" Payload "alertdocument.domain URL pwned. https://www.instacart.com/lists/izy0w6Q?preview=true attached a screenshot...

My Cafe: Recipes & Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Cafe: Recipes & Stories published at the 'play' market has multiple vulnerabilities...

Cookbook Recipes : RecetteTek - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cookbook Recipes : RecetteTek published at the 'play' market has multiple vulnerabilities...

Yummly Recipes & Shopping List - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Yummly Recipes & Shopping List published at the 'play' market has multiple vulnerabilities...

Smoothie Recipes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Smoothie Recipes published at the 'play' market has multiple vulnerabilities...