WordPress Comment Rating 1.5.0 Cross Site Scripting

FULL DISCLOSURE Product : wp-comment-rating Exploit Author : Rahul Pratap Singh Version : 1.5.0 Home page Link : http://codecanyon.net/item/wordpress-comment-rating-plugin/6582710 Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 30/Jan/2016 XSS...

Hot or Not? The Benefits and Risks of iOS Remote Hot Patching

Introduction Apple has made a significant effort to build and maintain a healthy and clean app ecosystem. The essential contributing component to this status quo is the App Store, which is protected by a thorough vetting process that scrutinizes all submitted applications. While the process is...

WordPress Ultimate CSV Importer 3.8.6 Cross Site Scripting

FULL DISCLOSURE Product : WP-Ultimate CSV Importer Exploit Author : Rahul Pratap Singh Version : 3.8.6 Home page Link : https://wordpress.org/plugins/wp-ultimate-csv-importer Website Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date Date : 27/Jan/201...

BK Mobile jQuery CMS 2.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications Product : BK Mobile CMS Exploit Author : Rahul Pratap Singh Version : 2.4 Home page Link : http://codecanyon.net/item/jquery-mobile-website-with-full-admin-panel/2441358 Website : 0x62626262.wordpress.com Linkedin :...

BK Mobile jQuery CMS 2.4 - Multiple Vulnerabilities

Product : BK Mobile CMS Exploit Author : Rahul Pratap Singh Version : 2.4 Home page Link : http://codecanyon.net/item/jquery-mobile-website-with-full-admin-panel/2441358 Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 27/Jan/2016 SQLi...

runtime-solutions.com XSS vulnerability

Vulnerable URL: http://www.runtime-solutions.com/indiaon2011/videofile.php?videoname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution

/ BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution Vendor: West Control Solutions PMA Prozeß- und Maschinen-Automation GmbH Product web page: http://www.west-cs.com Software link: http://www.west-cs.com/resources/software-temp-control/pma-products-software/ Application Path:...

BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution

Summary Engineering Tool for West Pro Series of controllers KS20-1, KS92-1, TB40-1, KS800, KS816, Dig280-1, KS vario, CI45, KS45, SG45, TB45, RL400, Pro96, CAL4600. Description BlueControl suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries...

m.crafttechsolutions.com Open Redirect vulnerability

Vulnerable URL: http://m.crafttechsolutions.com/?task=get=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pageran...

How Do I Configure Framehawk Support on NetScaler Gateway?

This article describes how to configure Framehawk support on NetScaler Gateway. Use Case With the increase of mobile users adopting tablets and smartphones, it is critical to ensure a rich virtual application and desktop user experience on Wi-Fi and cellular networks where network quality may be...

CVE-2015-7450: Deserialization of Untrusted Data

Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

CVE-2015-7936

CVE-2015-7936: CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway’s web-based management enables remote attackers to hijack an administrator’s session to change a password. Affected product: MOSCAD IP Gateway (all versions) with web access; root cause described as CSRF without proper anti...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

Motorola Solutions MOSCAD SCADA IP Gateway Cross-Site Request Forgery Vulnerability

Motorola Solutions MOSCAD SCADA IP Gateway is a Web-based SCADA system that provides management functions from Motorola Motorola Solutions. A cross-site request forgery vulnerability exists in the Motorola Solutions MOSCAD SCADA IP Gateway that could allow a remote attacker to hijack an...

CVE-2015-7936: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...