245 matches found
Pay With Tweet <= 1.1 - Multiple Vulnerabilities
The pay-with-tweet WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress Tweet Old Post plugin <= 3.2.5 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Tweet Old Post plugin = 3.2.5 SQL Injection Vulnerability Date: 2011-09-05 Author: sherl0ck sherl0ck at alligatorteam dot org Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- P...
wordpress pay with tweet plugin <= 1.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Date: 01/06/2012 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Version: 1.1 1 Blind...
Austrian Teen Ground Zero Of TweetDeck Hack
The last 24 hours have been a sad, scary and frustrating time for an 19-year-old aspiring programmer in Austria who found himself smack in the middle of Wednesday’s TweetDeck mess—all because of a Unicode heart. Twitter’s real-time account dashboard was taken down for a brief time yesterday befor...
TweetDeck Taken Down in Wake of XSS Attacks
TweetDeck services have been disabled for the time being as Twitter tries to get a handle on a cross-site scripting vulnerability that caused mountains of consternation on the social networking platform this morning. We've temporarily taken TweetDeck services down to assess today's earlier securi...
Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...
CVE-2013-6342
Cross-site scripting XSS vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tbtabindex parameter to wp-admin/options-general.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tbtabindex parameter to wp-admin/options-general.php...
CVE-2013-6342
CVE-2013-6342 concerns a Cross-Site Scripting (XSS) in the WordPress Tweet Blender plugin prior to 4.0.2. The issue arises from insufficient sanitization of the tb_tab_index parameter submitted to /wp-admin/options-general.php, allowing a remote attacker to inject arbitrary script or HTML in the ...
CVE-2013-6342
Cross-site scripting XSS vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tbtabindex parameter to wp-admin/options-general.php...
WordPress Tweet Blender Plugin <= 4.0.1 - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "tbtabindex" parameter to wp-admin/options-general.php. Solution Update the plugin...
Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
High-Tech Bridge Security Research Lab discovered vulnerability in Tweet Blender Wordpress Plugin, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in Tweet Blender Wordpress Plugin: CVE-2013-6342 1.1 The vulnerability exists due to insufficient...
Syrian Hackers Hijack AP Twitter Tweet Obama Injured by Bomb
Twitter is facing increased pressure to beef up authentication for users after the hijacking of another high-profile account yesterday caused some temporary tremors on the stock market. The social network has reportedly been testing two-factor authentication internally; Twitter lags behind Google...
Hacker raided by FBI after leaking Microsoft next Xbox release information
FBI agents this week raided the home of a Australian hacker who recently leaked a slew of details about Microsoft's next release of Xbox console. "They just took all my computers my hard drives, all of my technology, they took my bank cards, credit cards, bank statements," he said. He had claimed...
Oracle website saying - "Hello World" , is it a Hack ?
This afternoon I just got a ping from one of my Friend that Oracle website compromised. Its hard to believe that ORACLE can be compromised ? So lets explore that what going on: Oracle.com , Website Oracle Corporation , an American multinational computer technology corporation that specializes in...
CVE-2012-5350
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...
CVE-2012-5349
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...
Sql injection
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode...
CVE-2012-5350
CVE-2012-5350 affects the WordPress Pay With Tweet plugin (before 1.2). The vulnerability is a SQL injection in the paywithtweet shortcode, exploitable by remote authenticated users with certain permissions via the id parameter. This can lead to arbitrary SQL execution with the permissions of the...