428 matches found
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.4.18 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.4.18. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.4.19...
VAN UI freezes after KB2813956 is applied in Windows 7
VAN UI freezes after KB2813956 is applied in Windows 7 Symptoms Consider the following scenario: You have a Windows 7-based computer that uses mobile broadband connection. You apply the KB2813956 update on the computer. You roam through different network providers. For example, this occurs when y...
van-bergen-bv.hondagroendealers.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1062249 Security Researcher Hackerclaus Helped patch 69 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
van-elk-tuin-en-park-bv.hondagroendealers.nl Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-935498 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
Aruba VAN SDN Controller Detection
Binary data arubavansdncontrollerdetect.nbin...
Aruba VAN SDN default credentials
The Aruba Virtual Application Networks VAN Software Defined Networking SDN controller running on the remote host is configured with default credentials. A default service token is configured or the 'sdn' account is using a default password. An unauthenticated, remote attacker can exploit this to...
WordPress Van Ons WP GDPR Compliance Plugin Elevation of Privilege Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Van Ons WP GDPR Compliance plugin is a data collection plugin used in ... An elevation of privilege vulnerability...
CVE-2018-19207
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
CVE-2018-19207
The Van Ons WP GDPR Compliance (wp-gdpr-compliance) plugin for WordPress, prior to version 1.4.3 , is vulnerable to remote code execution and privilege escalation . The root cause is a failure to properly sanitize user-supplied input for the $wpdb->prepare() function and a lack of proper valid...
CVE-2018-19207
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
CVE-2018-19207: Direct Request
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
VulnCheck KEV: CVE-2018-19207
The Van Ons WP GDPR Compliance aka wp-gdpr-compliance plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb-prepare input is mishandled, as exploited in the wild in November 2018...
PT-2018-14863
Name of the Vulnerable Software and Affected Versions Van Ons WP GDPR Compliance plugin versions prior to 1.4.3 Description The issue allows remote attackers to execute arbitrary code due to mishandled input in $wpdb-prepare. This has been exploited in the wild. Recommendations For versions prior...
Ubuntu 14.04 LTS / 16.04 LTS : GnuPG vulnerability (USN-3733-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3733-1 advisory. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom...
HP VAN SDN Controller Detection
Detection of HP VAN SDN Controller. The script sends a connection request to the server and attempts to detect HP VAN SDN Controller. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
HP VAN SDN Controller - Root Command Injection (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP VAN SDN Controller Root Command Injection', 'Description' = %q This module exploits a hardcoded service token or default credentials in HPE VA...
HP VAN SDN Controller Root Command Injection Exploit
This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...
HP VAN SDN Controller Root Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP VAN SDN Controller Root Command Injection', 'Description' = %q This module exploits a hardcoded service token or default credentials in HPE VA...
van-beek.nl XSS vulnerability
Open Bug Bounty ID: OBB-638880 Description| Value ---|--- Affected Website:| van-beek.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
henry-van-de-velde-schule.de XSS vulnerability
Open Bug Bounty ID: OBB-637939 Description| Value ---|--- Affected Website:| henry-van-de-velde-schule.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...