Cross site scripting

Cross-site scripting XSS vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URI...

Sql injection

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the 1 selectinvitaioncodebulkoption or 2 invidelid parameter in the pie-invitation-codes page to...

CVE-2015-7377

Cross-site scripting XSS vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URI...

CVE-2015-7682

CVE-2015-7682 concerns the Pie Register WordPress plugin (version 2.0.18 or earlier). The connected sources confirm two blind SQL injection vulnerabilities in pie-register/pie-register.php, exploitable via POST parameters: “select_invitaion_code_bulk_option” and “invi_del_id” on the pie-invitatio...

CVE-2015-7377

The CVE-2015-7377 vulnerability affects WordPress Pie Register plugin versions before 2.0.19, where an unsanitized invitaion_code parameter in pie-register.php enables reflected XSS. The root cause is improper handling of the GET parameter, allowing injection of arbitrary script/HTML. Impact is r...

CVE-2015-7682

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the 1 selectinvitaioncodebulkoption or 2 invidelid parameter in the pie-invitation-codes page to...

AdobeWorkgroupHelper 2.8.3.3 - Local Stack Buffer Overflow

''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-ADOBE-WRKGRP-BUFFER-OVERFLOW.txt Vendor: ================================ www.adobe.com Product: ================================= AdobeWorkgroupHelper.exe v2.8.3.3 Part of Photosh...

WordPress Pie Register Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language and Pie Register is one of the plugins. A SQL injection vulnerability exists in the Pie Register plugin in WordPress. An attacker can exploit this vulnerability to obtain sensitive information...

WordPress Pie Register 2.0.18 Cross Site Scripting / SQL Injection Vulnerabilities

WordPress Pie Register plugin version 2.0.18 suffers from multiple remote blind SQL injection and Cross Site Scripting vulnerabilities. Description ================ An unauthenticated reflected XSS vulnerability in Pie Register 2.0.18 allows malicious script injection via the invitaioncode...

WordPress Pie Register Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language and Pie Register is one of the plugins. A cross-site scripting vulnerability exists in the Pie Register plugin in WordPress. An attacker can exploit this vulnerability to inject malicious parameters...

Pie-Register <= 2.0.18 - Authenticated Blind SQL Injection

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

Pie-Register <= 2.0.18 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Pie Register 2.0.18 Cross Site Scripting

Details ================ Software: Pie Register Version: 2.0.18 Homepage: https://github.com/GTSolutions/Pie-Register CVE: CVE-2015-7377 Pending CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N CWE: CWE-79 Description ================ An unauthenticated reflected XSS vulnerability in Pie Register...

WordPress Pie Register 2.0.18 SQL Injection

Details ================ Software: Pie Register Version: 2.0.18 Homepage: https://github.com/GTSolutions/Pie-Register CVE: CVE-2015-7682 Pending CVSS: 3.5 Low; AV:N/AC:M/Au:S/C:P/I:N/A:N CWE: CWE-89 Description ================ Two blind SQL injection vulnerabilities in Pie Register 2.0.18 allow...

Wordpress AlertWire 1.1.1 Plugin - Full Path Disclosure Vulnerability

Exploit for php platform in category web applications Title : Wordpress Plugin AlertWire 1.1.1 - Full Path Disclosure Vulnerability Date : 17/12/2014 Author : ZwX Download Link : https://wordpress.org/plugins/alertwire/ Vendor : http://www.alertwire.com/ Tested : Windows 7...

CVE-2015-5900

The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service boot failure via a crafted app that writes to an unintended address...

WordPress Pie Register Plugin <= 2.0.18 - Multiple SQL Injection

An SQL Injection exsist in pie-register/pie-register.php. It allows the administrators to execute arbitrary SQL commands via the 1. selectinvitaioncodebulkoption or 2. invidelid parameter in the pie-invitation-codes page to wp-admin/admin.php. Solution Update the plugin...

WordPress Pie Register Plugin <= 2.0.18 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URL. Solution Update the plugin...

libunwind: off-by-one in dwarf_to_unw_regnum()

An off-by-one array indexing error was found in the libunwind API, which could cause an error when reading untrusted binaries or dwarf debug info data. Red Hat products do not call the API in this way; and it is unlikely that any exploitable attack vector exists in current builds or supported usa...

CVE-2015-3291

arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service skipped NMI by modifying the rsp register, issuing a syscall instruction, and triggering an NM...