CVE-2019-19502

This CVE affects Image Uploader and Browser for CKEditor (pluginconfig.php) prior to version 4.1.9. The root cause is a code injection vulnerability that allows remote authenticated users to execute arbitrary PHP code. Impact is scope-wide on affected deployments, with high risk per CVSS in the p...

CVE-2019-19502

Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code...

WordPress simple-301-redirects-addon-bulk-uploader plugin redirection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. simple-301-redirects-addon-bulk-uploader is used in one of the Simple 301 Redirects redirect plugin to provide extended...

WordPress simple-301-redirects-addon-bulk-uploader plugin unauthorized operation vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. simple-301-redirects-addon-bulk-uploader is used in one of the Simple 301 Redirects redirect plugin to provide extended...

Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues

Unauthenticated option changes vulnerability that could allow an attacker to redirect all pages and posts of the blog to a malicious website, as well as an authenticated options export/deletion vulnerability...

Malicious Package

uploader-plugin is a malicious package. The package contains a malicious code which will steal sensitive information such as password, cvc, cardnumber fileds from forms and send to https://js-metrics.com/minjs.php?pl=...

AMIRA - Automated Malware Incident Response & Analysis

AMIRA is a service for automatically running the analysis on the OSXCollector output files. The automated analysis is performed via OSXCollector Output Filters, in particular The One Filter to Rule Them All : the Analyze Filter. AMIRA takes care of retrieving the output files from an S3 bucket,...

WordPress Memphis Documents Library 3.9.19 Cross Site Request Forgery

Exploit Title: WordPress Plugin Memphis Documents Library 3.9.19 - Cross Site Request Forgery Arbitrary File Add Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: May 22, 2019 Software Link : https://wordpress.org/plugins/memphis-documents-library/ Tested Version...

Synology Calendar Path Traversal Vulnerability

Synology Calendar is a file protection program from Synology Inc. of Taiwan, China that runs on Synology NAS Network Storage Server devices. A path traversal vulnerability in Attachment Uploader in versions prior to Synology Calendar 2.2.2-0532, which stems from a failure of a networked system or...

CVE-2018-13299

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter...

CVE-2018-13299

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter...

Path traversal

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter...

CVE-2018-13299

Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter...

CVE-2018-13299

CVE-2018-13299 affects Synology Calendar’s Attachment Uploader. A relative path traversal vulnerability in versions before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter. The issue arises from how the filename is processed, enabling access to loc...

CloudBees Jenkins Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks.Fortify on Demand Uploader Plugin is used in which a plug-in for submitting...

CloudBees Jenkins SSRF Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks.Fortify on Demand Uploader Plugin is used in which a plug-in for submitting...

CVE-2019-1003046

A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server...

CVE-2019-1003046

CVE-2019-1003046 describes a cross-site request forgery in the Jenkins Fortify on Demand Uploader Plugin (versions 3.0.10 and earlier). The vulnerability allows an attacker to cause the vulnerable plugin to initiate a connection to a server specified by the attacker. The provided documents do not...

CVE-2019-1003046

A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server...

CVE-2019-1003046

A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server...