WordPress WP Rocket Plugin Security Bypass Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . WP Rocket plugin is one of the cache optimization plugin . A security vulnerability exists in version 2.9.3 of...

CVE-2017-11658

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters .. -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack...

CVE-2017-11658

WP Rocket plugin for WordPress (version 2.9.3) is vulnerable to a Local File Inclusion bypass. The mitigation that trims traversal sequences (..) is ineffective when attackers can inject 0x00 bytes, enabling a remote attacker to bypass security restrictions via a null-byte injection (illustrated ...

CVE-2017-1000054

Rocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for messages...

PT-2017-10764 · Rocket.Chat · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions 0.8.0 and newer Description: The issue concerns an XSS vulnerability in the markdown link parsing code for messages. Recommendations: For Rocket.Chat versions 0.8.0 and newer, at the moment, there is no information about ...

WP Rocket <= 2.10.3 - Local File Inclusion (LFI)

Requires older versions of PHP that are vulnerable to null byte injection...

Rocket Soccer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rocket Soccer published at the 'play' market has multiple vulnerabilities...

Dr. Rocket - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Rocket published at the 'play' market has multiple vulnerabilities...

Rocket Music Player - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Rocket Music Player published at the 'play' market has multiple vulnerabilities...

Guía para Rocket League - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Guía para Rocket League published at the 'play' market has multiple vulnerabilities...

orangetail.com vulnerability

Vulnerable URL: http://orangetail.com/rocket/?by=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 395115 Google Pagerank| 0 VIP website status:| No Check orangetail.com SSL...

members.rocketlanguages.com XSS vulnerability

Open Bug Bounty ID: OBB-93649 Description| Value ---|--- Affected Website:| members.rocketlanguages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Optimizing encrypted video

Security Optimizing encrypted video Share February 25th, 2015 You might have seen our press release that Opera’s Rocket Optimizer can now optimize encrypted video streams. The attentive reader will already have halted and said, “wait, what?”. In this blog post, we’ll explain how this works. Rocke...

Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)

A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...

Directory traversal

Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager TSM in Rocket ServerGraph 1.2 allows remote attackers to 1 create arbitrary files via a .. dot dot in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. dot d...

CVE-2014-3914

CVE-2014-3914 affects Rocket Servergraph 1.2 Admin Center, with directory traversal in the fileRequestor servlet (and related fileRequestServlet/userRequest servlet) allowing actions such as writeDataFile, run, runClear, readDataFile, del, and save_server_groups to be abused via crafted query/bod...

Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)

A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...

Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution (CVE-2014-3915)

Multiple vulnerabilities exist in Rocket Servergraph, an interface for monitoring backup solutions such as IBM Tivoli Storage Manager, Symantec NetBackup etc. These vulnerabilities are due to input validation errors when handling requests to the URIs userRequest and tsmRequest. A remote...

Rocket Servergraph Admin Center fileRequestor Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::HttpClient include...

BlueZone Desktop .zap file Local Denial of Service Vulnerability

No description provided by source. Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service Date: 10-15-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this...