CVE-2015-5151

CVE-2015-5151 affects the WordPress Slider Revolution (Revslider) plugin version 4.2.2. The vulnerability stems from inadequate validation/filtering of the client_action parameter in the revslider_ajax_action action called by wp-admin/admin-ajax.php, allowing remote attackers to inject arbitrary ...

CVE-2014-9734

CVE-2014-9734 describes a directory traversal vulnerability in the WordPress plugin for Slider Revolution (revslider) prior to 4.2. An attacker can cause a revslider_show_image action to wp-admin/admin-ajax.php with a .. in the img parameter to read arbitrary server files. Affected: Slider Revolu...

CVE-2015-5151

Cross-site scripting XSS vulnerability in the Slider Revolution revslider plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the clientaction parameter in a revsliderajaxaction action to wp-admin/admin-ajax.php...

CVE-2014-9735

The ThemePunch Slider Revolution revslider plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to 1 upload and execute arbitrary files via an updateplugin...

CVE-2014-9735

The CVE-2014-9735 issue affects WordPress ThemePunch Slider Revolution (RevSlider) before 3.0.96 and Showbiz Pro plugin 1.7.1 and earlier. The root cause is improper restriction of administrator AJAX functionality, enabling unauthenticated remote code execution via file upload and manipulation ac...

WordPress Slider Revolution Plugin <= 4.2.2 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the "clientaction" parameter. Solution Update the plugin...

PT-2015-4368

Name of the Vulnerable Software and Affected Versions Slider Revolution revslider plugin versions prior to 4.2 for WordPress Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability in the Slider Revolution plugin. This is achieved by...

WordPress Slider Revolution Plugin <= 3.0.95 - Multiple Vulnerabilities

Because of these vulnerabilities, the attackers can upload and execute arbitrary files, create, update, import or export arbitrary sliders via unspecified vectors, also, delete arbitrary sliders. Solution Update the plugin...

WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities

WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities Exploit Title: WordPress: wordpress huge-it-slider 2.7.5 & Persistent JS-HTML Code injection, Arbitrary slider deletion Date: 2015-06-23 Google Dork: intitle:"index of" intext:"/wp-content/plugins/slider-image/" Exploit Author:...

WordPress Huge IT Slider Plugin 2.7.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as cross-site request forgery and Persistent JS/HTML Injection. These vulnerabilities allow an attacker to make a user with access privileges to a page and inject JavaScript into the database. Solution Upgrade the plugin...

WordPress Plugin Huge-IT Slider 2.7.5 - Multiple Vulnerabilities

Exploit Title: WordPress: wordpress huge-it-slider 2.7.5 & Persistent JS-HTML Code injection, Arbitrary slider deletion Date: 2015-06-23 Google Dork: intitle:"index of" intext:"/wp-content/plugins/slider-image/" Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...

WordPress Image News Slider Plugin <= 3.1 - Multiple Vulnerabilities

There are multiple unspecified remote issues in this plugin. Solution Update plugin...

WordPress Image News Slider Plugin <= 3.3 - Unspecified Vulnerabilities

There are some unknown vulnerabilities in this plugin. Solution Update plugin...

WordPress Image Slider With Description Plugin <= 6.9 - Unknown Vulnerability

This plugin is prone to an unspecified issue. Solution Update the plugin...

WordPress Image Slider With Description Plugin <= 6.9 - Unknown Vulnerability

This plugin is prone to an unspecified issue. Solution Update the plugin...

WordPress Simple Slider Plugin <= 1.0 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in the New Image URL field. Solution Update the plugin...

WordPress Image Slider Widget Plugin <= 1.1.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Responsive Category Slider Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Responsive Category Slider Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Tails 1.4 - The Amnesic Incognito Live System

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...