W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Download

When you're creating a support ticket in the plugin page, you can add one or more of your your template themes. Then this file will be send to the author to help him resolving the issue. Now you select one, you send the form and same as for the files before, you will send it to the author to help...

Wordpress Multi Themes arbitrary File Download vulnerability

No description provided by source...

Joomla Sensitive Core Files Information Disclosure

An information disclosure vulnerability exists in multiple Joomla Plugins and themes. Successful exploitation of this vulnerability could allow a remote attacker to download local files, and may lead to disclosure of database credentials...

WordPress Bonkersbeat / Method / Awake Arbitrary File Download

Exploit Title : Wordpress Multi Themes Arbitrary File Download Vulnerability Exploit Author : xBADGIRL21 Dork : wp-content/themes/ /lib/scripts/ Tested on: BackBox skype:xbadgirl21 Date: 22/08/2016 video Proof : https://youtu.be/DFtF14ShHk Myblog : http://xbadgirl21.blogspot.com/ + DESCRIPTION : ...

[SECURITY] Fedora 23 Update: kf5-knewstuff-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 module for downloading and sharing additional application data like plugins, themes, motives, etc...

[SECURITY] Fedora 23 Update: kf5-kemoticons-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 module that provides emoticons themes as well as helper classes to automatically convert text emoticons to graphical emotico ns...

[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 integration module with icon themes...

[SECURITY] Fedora 24 Update: kf5-kemoticons-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 module that provides emoticons themes as well as helper classes to automatically convert text emoticons to graphical emotico ns...

[SECURITY] Fedora 24 Update: kf5-knewstuff-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 module for downloading and sharing additional application data like plugins, themes, motives, etc...

The vulnerability of the Firefox browser, which allows a remote attacker to bypass security restrictions

The vulnerability of Firefox lies in the ability to install extensions for lightweight themes without using an HTTPS connection. Exploiting this vulnerability allows a malicious individual to bypass user authentication by using a specially crafted website and by replacing the DNS request for...

WP Good News Themes Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Wordpress Good News Themes, which can be exploited by remote attackers to inject client-side scripting code...

Green Neon Keyboard Themes - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Green Neon Keyboard Themes published at the 'play' market has multiple vulnerabilities...

WP Good News Themes Cross Site Scripting

Document Title: =============== WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-29 Vulnerability Laboratory ID VL-ID:...

WordPress Good News Themes - Cross Site Scripting

Because of this vulnerability in the "s" value of the "Good News themes" module, remote attackers can inject client-side script code to the vulnerable index GET method request. Also, the "s" value is wrong encoded and not filtered by the regular validation. Solution Update the theme...

WP Good News Themes - CS Cross Site Web Vulnerability

Document Title: =============== WP Good News Themes - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 1771...

ElegantThemes - Privilege Escalation

Description An information disclosure vulnerability was found in the Divi Builder included in our Divi and Extra themes, as well as our Divi Builder plugin which resulted in the potential for user privilege escalation. If properly exploited, it could allow registered users, regardless of role, on...

WordPress Elegant Themes <= 2.6.3 - Privilege Escalation

WordPress Elegant Themes' products, such as Divi Builder, Divi, Extra and Divi 2.3, are prone to a privilege escalation vulnerability. Solution Update the theme...

Lightweight themes on Firefox for Android do not verify a secure connection — Mozilla

Mozilla developer Margaret Leibovic reported when Firefox for Android installs lightweight themes, it does not check to verify that they are served over an HTTPS connection. Instead, themes can be installed over an unencrypted connection, which could allow for a man-in-the-middle MITM attack by...

How do I Customize Unified Gateway Portal?

Use Case Portal is the first interaction point for end users and hence important to have correct representation of an organization. Customize the look and feel, color, logo and labels on the Gateway portal to brand the portal as per organizational standards. Introduction to Portal Customization...

Shopify: [CSRF] Install premium themes

Hi , I have found a CSRF issue in themes.shopify.com when installing premium themes. Details: When going to a premium theme page for example: https://themes.shopify.com/themes/editions/styles/light/ there is a button saying Preview in your store , clicking that button sends a POST request to...