Email Subscribers & Newsletters < 3.4.8 - Unauthenticated Subscriber Download

The Email Subscribers & Newsletters – Simple and Effective Email Marketing WordPress Plugin WordPress plugin was affected by an Unauthenticated Subscriber Download security vulnerability. POST /?es=export ... option=viewallsubscribers...

WordPress Plugin Email Subscribers &amp; Newsletters 3.4.7 - Information Disclosure

Exploit Title: WordPress Plugin Email Subscribers & Newsletters 3.4.7 - Information Disclosure Google Dork: Date: 2018-01-23 Exploit Author: ThreatPress Security Vendor Homepage: http://icegram.com/ Software Link: https://wordpress.org/plugins/email-subscribers/ Version: 3.4.7 Tested on: WordPres...

CVE-2018-0006

The CVE-2018-0006 vulnerability affects Junos OS on devices configured for DHCPv4/v6 over AE auto-sensed VLANs in Broadband Edge deployments. The issue is a Denial of Service caused by a high rate of VLAN authentication requests triggering unbounded memory allocations in the bbe-smgd (BBE subscri...

helmetcityinternational.com XSS vulnerability

On the 03.01.2018 security researcher reported a XSS vulnerability affecting the helmetcityinternational.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 3...

benamusements.com XSS vulnerability

On the 02.01.2018 security researcher reported a XSS vulnerability affecting the benamusements.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 2 January, 2018...

forbes.com.dnstree.com XSS vulnerability

On the 30.12.2017 security researcher reported a XSS vulnerability affecting the forbes.com.dnstree.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 30 Decembe...

energy.gov.dnstree.com XSS vulnerability

On the 29.12.2017 security researcher reported a XSS vulnerability affecting the energy.gov.dnstree.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 29 Decembe...

golshahr.rssing.com XSS vulnerability

On the 24.12.2017 security researcher reported a XSS vulnerability affecting the golshahr.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 24 December,...

aaaml.org XSS vulnerability

Vulnerable URL: http://www.aaaml.org/search?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E==011443105329017565283%3Aexhcxgkrulm=FORID%3A11=ISO-8859-1=en Details: Description| Value ---|--- Patched:| Yes, at 15.01.2018 Latest check for patch:| 15.01.2018 12:38 GMT Vulnerability...

geschichte.nrw.de XSS vulnerability

Vulnerable URL: http://www.geschichte.nrw.de/artikel.php?artikelid=460%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E=en Details: Description| Value ---|--- Patched:| Yes, at 14.12.2017 Latest check for patch:| 14.12.2017 12:28 GMT Vulnerability type:| XSS Vulnerability...

gophersport.com XSS vulnerability

Vulnerable URL: https://www.gophersport.com/account/register.cfm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 193751 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

collectspace.com XSS vulnerability

Vulnerable URL:...

ZTE ZXDSL 831CII Unauthorized Access Vulnerability

The ZTE ZXDSL 831CII is an ADSL modem Modem product from China's ZTE Corporation ZTE. An unauthorized access vulnerability exists in the ZTE ZXDSL 831CII, which originates from the program failing to properly restrict access rights. An attacker could exploit this vulnerability to change the...

techcrunch4843.rssing.com XSS vulnerability

On the 28.11.2017 security researcher reported a XSS vulnerability affecting the techcrunch4843.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 28...

gunchi.org XSS vulnerability

Vulnerable URL: http://www.gunchi.org/bbs/bbs2.php?table=daejeonboard=%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/c/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

bluegreenkorea.co.kr XSS vulnerability

Vulnerable URL: http://www.bluegreenkorea.co.kr/bbs.php?table=helpdesk=%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/c/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

judicial6351.rssing.com XSS vulnerability

On the 18.11.2017 security researcher reported a XSS vulnerability affecting the judicial6351.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18...

planetahuerto.es XSS vulnerability

Vulnerable URL: https://www.planetahuerto.es/articulos-buscar/%22%3E%3Cimg%20src=%22x%22%20onerror=prompt%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58261 VIP website status:| No...

musclekhan.com XSS vulnerability

Vulnerable URL: http://musclekhan.com/shop/v1/product/index.php?page=3=OXvo20company=div=%EC%8B%A0%EC%83%81%ED%92%88sort=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

elefantfilms.ch XSS vulnerability

Vulnerable URL: http://www.elefantfilms.ch/film.php?s='" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--...