3091 matches found
WordPress 4.0.1 Cross-Site Scripting Vulnerability Patch
WordPress’s latest update, 4.0.1, patches a critical cross-site scripting vulnerability affecting comment boxes on websites running the content management system software. An attacker would need only to inject malicious JavaScript into a comment that would infect a reader viewing it on the webpag...
WP Statistics <= 8.3 - Stored & Reflected Cross-Site Scripting (XSS)
The WP Statistics WordPress plugin was affected by a Stored & Reflected Cross-Site Scripting XSS security vulnerability...
Joomla HD FLV 2.1.0.1 Arbitrary File Download
!/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/...
Google Working on Tool to Gather Stats While Preserving Privacy
Google is working on a new system that enables the company to collect randomized information about the way that users are affected by unwanted software on their machines, without gathering identifying data about the users. The system is known as RAPPOR Randomized Aggregatable Privacy-Preserving...
CVE-2014-6293
SQL injection vulnerability in the Statistics kestats extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014...
Sql injection
SQL injection vulnerability in the Statistics kestats extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014...
CVE-2014-6293
SQL injection vulnerability in the Statistics kestats extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014...
CVE-2014-6293
CVE-2014-6293 corresponds to a SQL injection in TYPO3’s Statistics (ke_stats) extension prior to version 1.1.2. The vulnerability affects ke_stats and allows remote attackers to execute arbitrary SQL commands via unspecified vectors; the issue was publicly noted as exploited in the wild in Februa...
CVE-2014-4421
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
CVE-2014-4419
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
CVE-2014-4371
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4419,...
Design/Logic Flaw
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
Design/Logic Flaw
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
Design/Logic Flaw
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
CVE-2014-4421
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
CVE-2014-4371
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4419,...
CVE-2014-4421
CVE-2014-4421 involves the kernel’s network-statistics interface where memory is not properly initialized in iOS before 8 and Apple TV before 7, allowing an attacker’s crafted app to obtain sensitive memory-content and memory-layout information. The connected documents also list CVE-2014-4421 amo...
WordPress Feed Statistics Plugin <= 3.9 - Open Redirection
This plugin is prone to an open redirection vulnerability. Solution Update the plugin...
WordPress Rich Counter 1.1.5 Cross Site Scripting
Title : Wordpress Rich Counter 1.1.5 Plugin - Cross Site Scripting Risk : Normal Exploit Author : XroGuE Google Dork : inurl:wp-content/plugins/rich-counter/ Plugin Version : 1.1.5 Plugin Name : Rich Counter Plugin Download Link : http://downloads.wordpress.org/plugin/rich-counter.zip Vendor Home...