Fedora 23 : webkitgtk4 (2016-c1f4334ded)

This update addresses the following vulnerabilities : - CVE-2016-1857, CVE-2016-1856 Additional fixes : - Improved the detection of supported MIME types supported by the media player. - Fix web process crash when playing adaptive streaming media. - Change the volume while thumb slider is dragged,...

Master Slider <= 2.7.1 - Reflected Cross-Site Scripting (XSS)

The Master Slider – Responsive Touch Slider WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Master Slider Plugin <= 2.7.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade this plugin...

WordPress Master Slider 2.7.1 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Master Slider WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Lazy Content Slider plugin CSRF vulnerability

No description provided by source...

WordPress Lazy Content Slider 3.4 Cross Site Request Forgery

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...

WordPress Lazy Content Slider 3.4 Plugin - Cross-Site Request Forgery (Add Catetory)

Exploit for php platform in category web applications Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4...

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery Add Catetory Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps...

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...

WordPress Content text slider on post plugin <= 6.8 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by ALIREZAPROMIS in WordPress Content text slider on post plugin versions = 6.8. Solution Update the WordPress Content text slider on post plugin to the latest available version at least 6.9...

WordPress Content Text Slider On Post 6.8 Cross Site Scripting

Document Title: =============== Wordpress Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WordPress Gallery Master 1.0.22 Cross Site Scripting

Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New SGallery In Gallery Title Input And Gallery Description Place Your JavaScript Code After Creating Gallery JavaScript Code Will Be Executed . Plugin Is Accessable By Authors , Administartors , Editors...

WP Content Text Slider on Post 6.8 - Persistent Vulnerability

Document Title: =============== WP Content Text Slider on Post 6.8 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1655 Release Date: ============= 2015-12-07 Vulnerability Laboratory ID VL-ID:...

WordPress Meta Slider Plugin <= 2.1.6 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

WordPress Vertical Image Slider 1.0 CSRF / XSS

漏洞影响：Vertical Image Slider 1.0 https://wordpress.org/plugins/wp-vertical-image-slider/漏洞说明：Vertical Image Slider 1.0 对imagetitle和imageurl 变量没有进行过滤导致存在CSRF和XSS漏洞。问题代码：...

wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting & CSRF

The lack of CSRF check and sanitisation could allow attackers to perform Cross-Site Scripting attack against logged in administrator, as well as upload arbitrary files XSS via CSRF: alert"XSS"' alert"XSS"' setTimeout'form1.submit', 1; Upload file via CSRF:...

WordPress Vertical Image Slider 1.0 CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Wordpress Vertical image slider CSRF/XSS Exploit Author: Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/wp-vertical-image-slider/ Software Link:...

WordPress Vertical Image Slider Plugin - Multiple Vulnerabilities

This plugin is prone to cross site request forgery for change the values and upload shell and cross site scripting vulnerabilties. Solution Update the plugin...

WordPress Vertical Image Slider 1.0 CSRF / XSS

Exploit Title : Wordpress Vertical image slider CSRF/XSS Exploit Author: Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/wp-vertical-image-slider/ Software Link: https://downloads.wordpress.org/plugin/wp-vertical-image-slider.zip Date: 2015-08-2 Version: 1.0 Tested O...

WordPress Plugin Slider Revolution 3.0.95 任意文件上传漏洞

下面是对版本号为3.0.3的分析和测试结果。任意文件上传漏洞源于该插件自带的 “插件更新”” 功能，在启用该插件的同时会将一系列的action操作都注册到WordPress的ajax请求里。并且插件在接受更新请求后并没有判断用户权限，导致恶意者可利用该点进行攻击。所涉及文件：/revslideradmin.php //add common scripts there //self::addActionself::ACTIONADMININIT, "onAdminInit"; //ajax response to save slider options...