Wolf CMS Stored Cross-Site Scripting Vulnerability

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A stored cross-site scripting vulnerability exists in Wolf CMS version 0.8, which stems fr...

plone open redirect vulnerability

Plone is a free, open source Content Management System CMS. plone blindly uses referer headers in multiple places to redirect users to another page after a specific action. An attacker could exploit this vulnerability to attack users...

OLX: [Critical] Delete any account

Hi Guys i found a vulnerable endpoint the can deletes any logged in user the vulnerable url is olx.com/myaccount/delete/ with only one parameter called removehash POST /account/register/ HTTP/1.1 Host: olx.com.eg User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.7; rv:47.0 Gecko/20100101...

WordPress Count per Day 3.5.4 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an...

WordPress Count Per Day 3.5.4 Persistent Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...

WordPress Live Chat Support 6.2.00 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Live Chat Support plugin ------------------------------------------------------------------------ Han Sahin, July 2016...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to execute arbitrary code on the web server.

Exploiting a vulnerability in the operating system of the Zyxel ZyWALL USG 300 network firewall/switch allows a malicious actor to inject any desired web script through the Referer header. This is done by improperly handling the “404” error page, thereby compromising the integrity of data process...

Radancy: Application error message

Attack details HTTP Header input X-Forwarded-For was set to 12345'"'";|%00%0d%0a%bf%27'??? Error message found: Warning: inetpton function.inet-pton: Unrecognized address 12345'"\'\";|%00%0d%0a%00%bf%27' in...

DEBIAN-CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

UBUNTU-CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

CVE-2016-5739

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy CSP protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication toke...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the Moodle learning management system is related to deficiencies in restricting access to certain links. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information by reading the Referer header...

Heroku the latest vulnerability to cause the hackers can take control of their accounts-vulnerability warning-the black bar safety net

Premise Description: 5 month 2 6 day, the vulnerability has been fixed. Environment Heroku（https://www.heroku.com/there is one called“one click deployment”feature, when you click, it is possible to achieve a bond of the configuration and deployment of third-party components, libraries and...

CVE-2016-2190

Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log...

金窗教务系统 /web/web/lanmu/lanmushow.asp 等3处需要Referer头的GET型注入

No description provided by source...

Moodle < 2.7.13 / 2.8.x < 2.8.11 / 2.9.x < 2.9.5 / 3.0.x < 3.0.3 Multiple Vulnerabilities

Binary data 9194.prm...

MGASA-2016-0122 Updated moodle packages fix security vulnerability

In Moodle before 2.8.11, teachers who otherwise were not supposed to see students' emails could see them in the participants list CVE-2016-2151. In Moodle before 2.8.11, Moodle traditionally trusted content from external DB, however it was decided that external datasources may not be aware of web...

Microsoft Edge browser vulnerability, which allows a hacker to access the browser’s history or retrieve other information

The vulnerability of Microsoft Edge is related to errors in the Referer policy processing. Exploiting this vulnerability can allow a malicious actor to gain access to the browser history or request other information through a specially crafted HTTPS website...

CVE-2015-2286

lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page, which allows user-assisted remote attackers to discover password-reset tokens by reading a referer log after a victim navigates from this page to a...