WordPress Uncode Lite theme <= 1.3.3 - Cross-Site Request Forgery (CSRF) leading to Arbitrary Plugin Activation/Deactivation

Cross-Site Request Forgery CSRF leading to Arbitrary Plugin Activation/Deactivation discovered by Ex.Mi Patchstack in WordPress Uncode Lite theme versions = 1.3.3. Solution Deactivate and delete. The vendor ignores the vulnerability reports avoids any conversation...

WordPress Uncode Lite theme <= 1.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Lenon Leite Patchstack Red Team project in WordPress Uncode Lite theme versions = 1.3.3. This theme uses a vulnerable piece of code related to previously identified vulnerability - CVE-2021-39317. Solution Deactivate and delete. The vendor ignores...

WordPress Uncode 1.3.1 Theme - Arbitrary File Upload

Exploit for php platform in category web applications Vendor Homepage: Software Link: http://themeforest.net/item/uncode-creative-multiuse-wordpress-theme/13373220 Version: 1.3.0 possible 1.3.1 Tested on: Debian 8, PHP 5.6.17-3 Type: RCE, Arbirary file UPLOAD, Low Authenticated Time line: Found...

WordPress Theme Uncode 1.3.1 - Arbitrary File Upload

Vendor Homepage: Software Link: http://themeforest.net/item/uncode-creative-multiuse-wordpress-theme/13373220 Version: 1.3.0 possible 1.3.1 Tested on: Debian 8, PHP 5.6.17-3 Type: RCE, Arbirary file UPLOAD, Low Authenticated Time line: Found 24-APR-2016, Vendor notified 24-APR-2016, Vendor fixed:...

WordPress Theme Uncode 1.3.1 - Arbitrary File Upload

WordPress Theme Uncode 1.3.1 - Arbitrary File Upload Vendor Homepage: Software Link: http://themeforest.net/item/uncode-creative-multiuse-wordpress-theme/13373220 Version: 1.3.0 possible 1.3.1 Tested on: Debian 8, PHP 5.6.17-3 Type: RCE, Arbirary file UPLOAD, Low Authenticated Time line: Found...

WordPress Uncode Theme 1.3.1 - Arbitrary File Upload

WordPress Uncode theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the theme...

Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)

No description provided by source. !-- 6.30 10/06/2007 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll 4.0.4.2512 / DirectSpeechRecognition Module Xlisten.dll 4.0.4.2512 remote buffer overflow exploit/ xp sp2 version both dlls are vulnerable, this is the poc for the first one...