EUVD-2017-17715

Malware in sbrugna...

Malicious Browser Extensions Infect Over 700 Users Across Latin America Since Early 2025

Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Chromium-based web browsers and siphon user authentication data. "Some of the phishing emails were sent from the servers of compromised...

WordPress Code Snippets Cross-Site Request Forgery Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Code Snippets. An attacker can exploit the...

TangoBB 1.5.0-A3 Cross Site Scripting

Exploit Title: TangoBB 1.5.0-A3 XSS Vulnerability Google Dork: "Powered by TangoBB" Date: 24-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: https://github.com/Codetana/TangoBB Version: 1.5.0-A3 Tested on: Firefox 36 & Chrome 38 / W8.1-x64 CVE : NONE Published: 24-2-2015 Vendor updated:...

FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities

This is a post forwarded from the Unpatched mailing list http://www.pivx.com/pivxlabsUnpatched.asp , a mailing list that receive advance notification of any security research from PivX Labs. Cheers Thor From: Thor Larholm To: [email protected] Subject: Unpatched Shell and Drag'n'Drop...