phpMyAdmin -- Multiple vulnerabilities

The phpMyAdmin development team reports: Open redirect php-gettext code execution DOS vulnerability in table editing CSS injection in themes Cookie attribute injection attack SSRF in replication DOS in replication status...

WordPress Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website:...

WordPress Templatic 2.3.6 File Upload

Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website: https://www.r3m1ck.us/ Category: webapps Google Dork:...

WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload

Exploit Title: WordPress Templatic = 2.3.6 Tevolution File Upload Vulnerability Date: 30-12-2016 Software Link: Permium plugin Vendor Homepage: https://templatic.com/wordpress-plugins/tevolution Exploit Author: r3m1ck Website: https://www.r3m1ck.us/ Category: webapps Google Dork:...

Via WordPress Auto Update feature disposable invasion Internet 2 7%site-vulnerability warning-the black bar safety net

Recently, we are still constantly trying to find the WordPress community in a third-party plug-ins and themes in the presence of security vulnerabilities. During the study, we are also on WordPress core, and the associated wordpress. org system were detected. In the beginning of the year, we...

WordPress Directory Themes Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...

Wordpress Multi Themes Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Download

When you're creating a support ticket in the plugin page, you can add one or more of your your template themes. Then this file will be send to the author to help him resolving the issue. Now you select one, you send the form and same as for the files before, you will send it to the author to help...

Wordpress Multi Themes arbitrary File Download vulnerability

No description provided by source...

Joomla Sensitive Core Files Information Disclosure

An information disclosure vulnerability exists in multiple Joomla Plugins and themes. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...

WordPress Bonkersbeat / Method / Awake Arbitrary File Download

Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk Myblog : http://xbadgirl21.blogspot.com/ + DESCRIPTION : ...

[SECURITY] Fedora 23 Update: kf5-knewstuff-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 module for downloading and sharing additional application data like plugins, themes, motives, etc...

[SECURITY] Fedora 23 Update: kf5-kemoticons-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 module that provides emoticons themes as well as helper classes to automatically convert text emoticons to graphical emotico ns...

[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 integration module with icon themes...

[SECURITY] Fedora 24 Update: kf5-kemoticons-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 module that provides emoticons themes as well as helper classes to automatically convert text emoticons to graphical emotico ns...

[SECURITY] Fedora 24 Update: kf5-knewstuff-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 module for downloading and sharing additional application data like plugins, themes, motives, etc...

The vulnerability of the Firefox browser, which allows a remote attacker to bypass security restrictions

The vulnerability of Firefox lies in the ability to install extensions for lightweight themes without using an HTTPS connection. Exploiting this vulnerability allows a malicious individual to bypass user authentication by using a specially crafted website and by replacing the DNS request for...

WP Good News Themes Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Wordpress Good News Themes, which can be exploited by remote attackers to inject client-side scripting code...

Green Neon Keyboard Themes - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Green Neon Keyboard Themes published at the 'play' market has multiple vulnerabilities...

WordPress Good News Themes - Cross Site Scripting

Because of this vulnerability in the "s" value of the "Good News themes" module, remote attackers can inject client-side script code to the vulnerable index GET method request. Also, the "s" value is wrong encoded and not filtered by the regular validation. Solution Update the theme...